How to permanently delete root CAs from mozilla products?

[Christoph A.]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 09/17/2011 01:36 PM, Craig White wrote:
> I remember having to delete a certificate 2 times to actually physically
> remove them - the first time sets it to untrusted and the second one
> finally purges it but I think from a safe point of view, it is probably
> better to only delete it 1 time to set it to non-trusted and leave it
> there so there is no ambiguity - it is not to be trusted.

I wasn't able to reproduce this. I removed them twice and they were
still there.
-----BEGIN PGP SIGNATURE-----

iEYEAREKAAYFAk50tvgACgkQrq+riTAIEg3W5ACfYNJ77YmNnm53+jvlLaLwG9IH
NFgAoOkpiiQRPvQ1I72IzRTZtgya/Kxn
=6C6I
-----END PGP SIGNATURE-----