Not just Mozilla, really the entire CA hierarchy is broken. Everyone's kind of known it for a while, but nothing went majorly wrong until last month: http://arstechnica.com/security/news/2011/03/how-the-comodo-...

It's a commentary on the Comodo hack and the sad state of SSL CAs that led to it: there are too many CAs and their processes are too weak, so what's the harm from one more?

http://benlog.com/articles/2011/03/30/intelligently-designin...