Reducing exposure to root certificate authorities: http://t.co/vBf34QZ8cC