David Hayes

<blockquote>”(*) Please note a general limitation is that, unlike long-time players like Verisign, CAcert’s root certificate is not included by default in mainstream browsers, email clients, etc. This means people to whom you send encrypted email, or users who visit your SSL-enabled web server, will first have to import CAcert’s root certificate, or they will have to agree to pop-up security warnings (which may look a little scary to non-techy users).”
</blockquote>

So, to Joe public, indistinguishable from a certificate you’ve cobbled up yourself with a few OpenSSL commands.
<p>
On the other hand the volunteer web of trust system looks workable-ish. I’d probably want my browser to nudge me if I was on a site authenticated by this CA.