•

EU Tries To Slip In New Powers To Intercept Encrypted Web Traffic Without Anyone Noticing

https://www.techdirt.com/2023/11/03/eu-tries-to-slip-in-new-powers-to-intercept-encrypted-web-traffic-without-anyone-noticing/

The EU is currently updating eIDAS (electronic IDentification, Authentication and trust Services), an EU regulation on electronic identification and trust services for electronic transactions in th…

5 comments

conciselyverbose

•

Jesus.

If you want to legally operate your browser in the EU, you have to blanket trust any certificate any member country wants you to with no security check of any sort that's not explicitly approved by the EU.

Hirom

•

I wonder if this would end up creating a second parallel PKI. The existing one used for HTTPS security based on Browser's own trust decisions and CA-Browser forum guidelines. The EIDas one for a "government-approved" checkmark but that doesn't make the website HTTPS nor have a secure icon.

tesseract

•

There are already multiple PKI stores on every system, managed by different entities. This is an attempt by demagogues to get around that problem using law to twist their arms.

conciselyverbose

•

He's implying presenting it differently to the user: "secure" and "EU approved".

I'm assuming the EU will fight hard to prevent that though.

Tosti

•

mojo

•

Mozilla's site boycotting this law:

https://last-chance-for-eidas.org/