Firefox does not use the OS&#x27;s certificate store. They use their own, and each root cert must pass Mozilla&#x27;s own policies.  There are long discussions about some cert issuers; see Mozilla&#x27;s &quot;dev-security-policy&quot; mailing list.<p>Somebody should file criminal charges against some of these outfits for violation of the Computer Fraud and Abuse Act.  From the article: &quot;the installers are so tricky and convoluted that we aren’t sure who is technically doing the “bundling,”&quot;.  Now that&#x27;s a good argument that the user gave the &quot;bundler&quot; permission, and they have thus &quot;exceeded authorized access&quot;, as the Computer Fraud and Abuse Act puts it.