SSL man-in-the-middle attacks

Mozilla.org has a lengthy explanation on their web site about how a root cert is allowed into the distribution. I assume that now that it has been proven that this vendor does not meet the standards of the Mozilla.org policy, their key will be removed from the distribution in the next update.