Hacker News Reader

it is frankly astonishing how many browsers/OS platforms ship by default trusting all of the major mainland chinese root CAs.

It’s astonishing because somehow the Chinese deserve to be treated differently from everyone else?

Because the Chinese government has a well documented track record of attempting to MITM SSL, and if your system trust the root CA... game over.