civil vs criminal

If I say that Barry took my pig...

In the criminal justice system the outcomes are either Barry is a thief, and may lose his liberty and most likely his current job and future job prospects. Or, he is not a thief and may go free. These outcomes are not balanced, if I set one thief in ten free, there are a few thieves roaming free, hardly noticeable. But if I send one innocent man in ten to jail, I end up with a jail full of innocent men, a gross injustice.

Whereas in the civil justice system, either Barry gets to keep the pig, or I do. These outcomes are balanced, either way somebody has a pig and someone doesn't. If a mistake is made, an honest man loses his pig no matter who it is.

If CNNIC make bogus certs, there should be evidence of it, let those who accuse them collect that evidence. If you prefer, in the meanwhile, to exercise the precaution of not trusting dubious entities as CAs, then I recommend disabling _every single one_ of the root CAs included with your OS or browser, since in my opinion none of them could be considered trustworthy in the relevant sense.