Honestly right now we're basically trusting a bunch of American companies to do the same job. What's different about this
Honestly right now we’re basically trusting a bunch of American companies to do the same job. What’s different about this
That we can ditch them with relative ease. Besides, Mozilla isn't a company, it's a non-profit. And the root CAs it includes aren't all American. So there's already better alternatives than this. I'm all for the EU creating alternatives. But if those are good they'll be used without anyone having to be forced.
This forced browsers to accept certificates set by public authorities, banned additional security checks on certificates (such as Certificate Transparency) unless the EU agrees to them (and with the ongoing lobbying work we see in Brussels there's not much trust if I may say so), it stopped innovation, destroyed years of work in encryption, and created an environment prone to Man-In-The-Middle-Attacks.
They should include a system to independently check these approved/recommended certificate issuers.
But the calls to revert the whole process come from US companies who have their own interests.
First of, this is not a call to revert the process but to adhere to what was publicly announced, and not some last-minute backroom deal for authoritarian control. Second, those companies are mostly European, in addition to the hundreds of European cybersecurity experts who are signatories. Third, your solution is horrible.
Europe
News/Interesting Stories/Beautiful Pictures from Europe 🇪🇺
(Current banner: Thunder mountain, Germany, 🇩🇪 ) Feel free to post submissions for banner pictures
Rules
(This list is obviously incomplete, but it will get expanded when necessary)
- Be nice to each other (e.g. No direct insults against each other);
- No racism, antisemitism, dehumanisation of minorities or glorification of National Socialism allowed;
- No posts linking to mis-information funded by foreign states or billionaires.
Also check out !yurop@lemm.ee