TLS certificate management on Android

This article reminded me of a session at last year's RSA conference about root Certificates on mobile devices.
The slides are on line but the firm behind them also made a blog which is easier reading
https://bluebox.com/questioning-the-chain-of-trust-invest...