I've also struggled with understanding what Mozilla does with that much money. It's a staggering amount. As for someone else's reply to you, same question. Wha

I've also struggled with understanding what Mozilla does with that much money. It's a staggering amount. As for someone else's reply to you, same question. What in the world do they do with 1000 people? And yet they can't develop something useful, like e.g. an improved alternative to Certificate Patrol? That way TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş. (first certificate in my browser) can't compromise my browsing in the USA. Fine to use them for someone browsing to a website in Elbonia, not so fine for anything that I would ever do. Edit: just to be clear, Turktrust actually did abuse their privileged position, and Mozilla did get rid of them. But why were they there in the first place, and what about the 100 or 1000 other certificates that Firefox comes with?