Honest question: as a United States internet user, is there any practical reason I need to have a root certificate from the Chinese national Internet authority installed?
Corollary, is there a short list of CAs that folks around here trust more than average? Is there any value in such a whitelist, or are all CAs so rotten it doesn't much matter?