As per the commit benalexau/westpac-balance-scraper@95ce092434091385467e51112c84f9fd5e6d5d45 I added the curl-provided certificate roots in FireFox as of 5 March 2014. As these are certificate roots, if Westpac changes its certificate to any other certificate that ultimately is signed by one of the FireFox-provided root certificates, it will continue to work. Note the existing code simply failed with an error, encouraging users who want to simply try the script to disable SSL checking entirely or deal with certificates themselves (with the associated complexity and risks). I'd therefore respectfully submit that this change is considerably more secure for normal users than what was present prior to the commit.