Re: rt.cpan.org uses an invalid security certificate.

Jonathan Yu wrote:
> But unfortunately CAcert's root
> certificates do not, to my knowledge, come bundled with a default
> installation of Firefox and need to be installed manually.

CAcert is currently undergoing Mozilla's audit policy 
(http://www.mozilla.org/projects/security/certs/policy/) in order to get 
their certificate included in Firefox and Thunderbird. Their root cert 
is still not included in OS/X or Safari and Windows/IE requires a $75K 
audit + $10k/year fees for a Webtrust audit.

See http://wiki.cacert.org/wiki/InclusionStatus for more info.

PAUSE uses CAcert, and requests that people install CAcert's root cert 
in their browser to use PAUSE:

http://www.cpan.org/modules/04pause.html#ssl

Seems like a decent approach.