Switch to Truststore by default

[sethmlarson]

Hello! Wanted to thank you for your work on the PDM project. Recently PDM adopted truststore as an alternate root CA mechanism to certifi. I've noticed this through downloads and dependency data and have been monitoring your issue tracker for a few weeks now waiting for potential issues to be found in truststore. So far I haven't seen any.

This is a good sign, I am so appreciative of taking this step and getting a large representative sample of users using Truststore. I would like to ask if you'd be interested in taking the next step which is using Truststore by default for all installations (Currently Truststore is being used by ~10% of your users, if we go by downloads alone).

This information is important because I would like to drive adoption of Truststore and mechanisms like it for other projects like pip, requests, and Python itself. Having this proof that Truststore works without issue for large populations and important projects is invaluable in convincing other projects to also adopt Truststore-like CA mechanisms.

Describe the solution you'd like

• Add Truststore as a default dependency for Python 3.10+
• Continue using Truststore by default

Let me know if you have questions or concerns, and again thank you so much for everything you've already done. 🙌