This is a lot like the drunk who lost his car keys and was looking for them underneath the street lamp, because that's where the light was. I.e. not very useful

This is a lot like the drunk who lost his car keys and was looking for them underneath the street lamp, because that's where the light was. I.e. not very useful activity. I'm using Firefox 35, and the very first certificate it trusts is from TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı. Huh? So there are still hundreds of random trusted certificate issuers controlled by dozens of random authoritarian governments? I'm supposed to be concerned about theoretical 1024 bit key strength, while we know for sure that various certificate authorities have been compromised in the past? Bah. They should fix the real problems first.