Imagine you don't need to actually give the list of certificates that you trust, then anyone would be able to setup a https website that an browser in the world would accept without warning of the security risk.
Imagine you don't need to actually give the list of certificates that you trust, then anyone would be able to setup a https website that an browser in the world would accept without warning of the security risk.