Well said AC. So they are going to draw a line on this, but blindly accept CAs that by their laws MUST comply with their government/military demands. If DNSSEC is all that, and in a perfect world it might be, then why is TrusCore an issue at all?

Meanwhile I counted at least 5 Chinese CA organizations in Mozilla's list, including the ironically named iTrusChina. I think they are barking up the wrong tree: if they are really going to apply that sort of judgement, I would think they would start with the authoritarian regimes that openly manipulate the internet. This is a case of mis-placed mis-trust.