(My opinion, of course.  Comodo's gotta be breathing a sigh of relief
that I don't work for the Mozilla Foundation, else I would have yanked
the trust bits first and figured it out later.)

This incident shows anew the lack of policy/procedure of what to do in
the case of a gross breach of the root agreement, though.  The entire
point of certificates in the first place is "user security", not "user
convenience".  (If this weren't the case, none of us would have any
desire to get certificates in the first place.)  Your reaction seems
to be based on placing "user convenience" over "user security", and
(again, my opinion) I don't believe that this is appropriate at all.

-Kyle H

On Tue, Dec 23, 2008 at 5:05 AM, Frank Hecker