Preview of our upcoming Root Ceremony

[bruncsak]

@aarongable

This is part of our constant effort to minimize the number of bytes transmitted during every TLS handshake, to help save global bandwidth.

@aarongable

We are not cross-signing the intermediates directly from ISRG Root X1, unlike our current ECDSA intermediates. Although this will increase the size of TLS handshakes, it is necessary that the chains presented by servers chain up to both our new and old roots

I understand that you also see the contradiction here. I suggest to generate intermediates from the old root certificates too, and allow the users to select them via alternate chain.