It has been a month since Cloudflare DoH no longer works with only the built-in CA list if "Verify DoH Certificate" is enabled, because they have changed their root CA.
Is there a plan to add "SSL.com Root Certification Authority ECC" to the Builtin Trust Store? And maybe the Builtin Trust Store update should be decoupled from the RouterOS update?
Yes, good idea. It should be a package that is not tightly coupled to the ROS version. It should have its own version number - or possibly no version number at all, it provides no real benefit (see routerboard version).
Using a CalVer scheme could make sense, as it would immediately show how old or new the package is. One additional advantage is that administrators could decide not to install it on 16 MB flash devices, thereby saving some valuable space.
One would think something as basic, would not have passed scrutiny during code testing prior to releasing to the testing crowd, its not that obscure!
On another note, is it fair to say that http2 adoption is coming soon ( affects?? persistent connections, reverse proxy, firewall rules, load balancing ??)
You can try and follow advice of fellow forum members (and risk of getting your device on fire). Or you can stick to official documentation (and miss many nifty features not mentioned there). It's your device and your choice.