Re:New trusted root certificates added to Windows in unannou...
by 0x0 on Tuesday October 11, 2016 @06:27PM
(#12689036)
Debian had some fairly dubious CAs included for almost 10 years, so they're not without fault. Looks like they've cleaned up - and at least their processes are fairly transparent.
https://lwn.net/Articles/590879/