We believe that by adding CA of CNNIC, <strong>you put your users at risk</strong>. We technical users have manually removed CA of CNNIC & its accomplice: Entrust. We appeal to Mozilla, Entrust, Inc. & others for permanent removal to keep the majority away from <strong>MITM attack</strong>!

<strong><big>Because:</big></strong>
   <strong><big>1st.</big></strong> The Chinese government is highly interested in GMail ^[1][2], it might ask CNNIC to help to perform MITM attacks, CNNIC is totally controlled by the government;
   <strong><big>2nd.</big></strong> CNNIC itself did notorious evil things before ^[3][4]. They might do evil again (MITM) for their own purpose (for instance: get money from deceptive certification).

Reference:<small>
1. http://en.wikipedia.org/wiki/Shi_Tao
2. http://googleblog.blogspot.com/2010/01/new-approach-to-china.html
3. http://en.wikipedia.org/wiki/China_Internet_Network_Information_Center#Malware_Production_And_Distribution
4. http://www.chinatechnews.com/2009/12/15/11208-cnnic-halts-website-domain-name-registration-for-individuals-in-china</small>