ahoy

have you seen this: https://wiki.debian.org/ServicesSSL

It smells like a debian mess to me. Got there while struggling with
curl not gettinge CA certs on a Rpi2 Devuan install, still not sure
what is wrong, did `dpkg-reconfigure ca-certificates` which worked in
the past.

however I'm writing now because I'm worried of the larger picture,
what mess is happening on the certificates and how we can avoid people
to struggle with such breaking changes.

am I right to worry?

ciao