EU Article 45 requires that browsers trust certificate authorities appointed by governments::The EU is poised to pass a sweeping new regulation, eIDAS 2.0. Buried deep in the text is Article 45, which returns us to the dark ages of 2011, when certificate authorities (CAs) could collaborate with governments to spy on encrypted traffic—and get away with it. Article 45 forbids browsers from…

  • @AMillionNames
    link
    English
    110 months ago

    As opposed to certificate authorities appointed by a small number of multinational companies. Sheesh, EFF is getting PETA levels of ridiculous, and people will buy it up because they don’t know how the web works.

    Yes, they will be able to intercept communication - if you are browsing the government website the certificates are designed for. This just seems like a law to help governments avoid having to pay exorbitant fees or requiring a risky and beyond most people’s ability to install custom CAs for their own government websites. Really losing trust on EFF on this …