What Certificate authorities to add and revoke later when they become statist?
This internet, it's completely fake. What certificate authorities and DNS do I replace (replacing one or more with statist certificate authorit(y/ies) and / or DNS(s) doesn't count.)
Tor, I2Predia, (Gemini alternative to http) don't count because they don't have certificate authorities and the State threw away a legal protection requirement (getting a warrant) for Tor.
Replacing your dominant CA will just take you to an even faker internet.