[Cialug] How do I yank a cert from my browsers' lists?

[jim kraai]

... and all certs that this entity signs?

This sounds 'scary' to me.
http://m.theepochtimes.com/n3/1180847-one-of-chinas-propaganda-bosses-now-controls-your-web-browser/
(sorry for the mobile link)

I don't want to get political, just practical.

For my sake and the sake of businesses that I work for and people I care
about, to what extent can I mitigate this risk, and in particular how can I
mitigate this risk?

I think I know the answers, but I also don't want to fail at this by
assuming too much.

A good treatment of this might even make for a good monthly meeting topic!

I'd love to be able to end up with a script that I can email to my mother
that she can download and double-click.

Thanks in advance for any insight and advice.

--jim