I don’t like China (don’t know why ), but I really like this tip:
In Firefox (Ubuntu), go to Edit => Preferences => Advanced => Encryption => View Certificates
Find CNNIC in the list, select & delete it asap
More information why you should remove CNNIC from Root CA Certificate in Firefox: http://www.dinhnguyen.info/wordpress/2010/02/10/quan-trong-khua-firefox-3-6-va-bao-mat
Yes! I think we should all remove it from the white list