Ask HN: What list of bad TLS/SSL CAs should I be removing? | Hacker News Reader