I personally have removed their certificates from my system. This is the responsible move to do if you care about your security or don't want your computers to be used as part of the DDoS like we've seen against GitHub.
This suggests no: http://apple.stackexchange.com/questions/23720/how-do-i-un-t...
Let's not conflate two mostly unrelated things here. Removing this root certificate does nothing to stop this attack against Github.
Only if the site you were visiting was over HTTPS, which it was not in the Github attack. Saying that you should remove this certificate if you don't want to participate in the Github attack or similar attacks is simply not true.
Hope someone finds this useful!
security: SecTrustSettingsRemoveTrustSettings (user): No Trust Settings were found.
security: SecTrustSettingsRemoveTrustSettings (admin): No Trust Settings were found. dpkg-reconfigure ca-certificates
I'm normally a fan of dpkg-reconfigure, but in this case, paging through 25 screens of 6 certs at a time, without search, is a far worse case than firing up your preferred browser, finding the root you want to revoke, and planting a bang '!' in front of it.
Otherwise, the processes vilda and I describe are identical.