On Sun, Jul 02, 2017 at 05:27:06PM +0100, Benny Siegert wrote: > agc made the argument that including certificates is similar to > including time zone data, which we do. We do not tell users to install > a package to use non-UTC timezones, for instance.
The only problem I see is that outdated timezone data doesn't necessarily have a real world impact. Outdated root CAs can. Joerg
