Re: Sure you can audit the list, but do you really trust all those CA's?
Snarky answer:
No. Truth be told, I don't even really trust the ones I have to.
More truthful answer:
No. But it's such a PITA keeping track of who is trustworthy and who isn't that I mostly accept the defaults. The good news is the desktop I rolled myself, so minimal exposure there. But it's really hard to roll your own laptop, even if you're in the biz. And cleaning out the crap is nearly impossible.