a new free smime service, but...

[Robert J. Hansen]

> Why doesn't Let's Encrypt offer this service?

Because it's outside the scope of what Let's Encrypt exists to do, which
is make it easy to provide HTTPS support to small websites.

SMTP is *totally* outside of Let's Encrypt's mission.  If you've got a
problem with that, take it up with Let's Encrypt.  They're pretty
responsive on Twitter at https://twitter.com/letsencrypt.

> Why isn't CAcert after years of participation listed as trusted CA in root
> stores?

Because CACert hasn't been able to comply with Mozilla's Root Store
Policy.  Chrome has its own root store policy, as does Internet
Explorer.  CACert hasn't been able to dot the is and cross the ts for
any of them, AFAIK.

https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/