172
Bad eIDAS: Europe ready to intercept, spy on your encrypted HTTPS connections
(www.theregister.com)
Sorry, but this is on the level where I'll never trust EU... I rather liked this organization but this makes no sense.
Like, which children to protect are going to be manufactured this time?
If it is any reassurance, not even the EU trusts the EU to control internet security: Parliament voted this down in its position, but member states are trying to bring it back. MEPs are fighting to ensure control remains with browsers.
I think the EP voted down Chat Control for now, but this is a different thing.
It did, but we are also fighting against eIDAS. I'm told last night's deal supposedly solves the problem, but I'm waiting for the text myself. (I worked on eIDAS in Parliament, my committee (Legal Affairs) recommended the complete deletion of Art45.
Let's hope so, feels like orgs were able to build up a reasonable amount of pressure in such a short amount of time.
It does kinda depend on whether this manages to actually pass...
This is the best summary I could come up with:
Lawmakers in Europe are expected to adopt digital identity rules that civil society groups say will make the internet less secure and open up citizens to online surveillance.
Thus, using a proxy in a man-in-the-middle attack, that government can intercept and decrypt the encrypted HTTPS traffic between the website and its users, allowing the regime to monitor exactly what people are doing with that site at any time.
How that compares to today's surveillance laws and powers isn't clear right now, but that's the basically what browser makers and others are worried about: government-controlled CAs being abused to issue certificates to websites that allow for interception.
An authority purge of this sort occurred last December when Mozilla, Microsoft, Apple, and later Google removed Panama-based TrustCor from their respective lists of trusted certificate providers.
"Article 45 forbids browsers from enforcing modern security requirements on certain CAs without the approval of an EU member government," the Electronic Frontier Foundation (EFF) warned on Tuesday.
Mozilla and a collection of some 400 cyber security experts and non-governmental organizations published an open letter last week urging EU lawmakers to clarify that Article 45 cannot be used to disallow browser trust decisions.
The original article contains 965 words, the summary contains 196 words. Saved 80%. I'm a bot and I'm open source!
https://nitter.cz/Rob_Roos/status/1722304545676497141?t=SDb1qsGpMC8CtZmNdc70mQ&s=19
The European Parliament and Member States just reached an agreement on introducing the Digital Identity, #eID.
Directly afterwards, #EU Commissioner Breton said: "Now that we have a Digital Identity Wallet, we have to put something in it...", suggesting a connection between #CBDC and eID.
They ignored all the privacy experts and security specialists. They're pushing it all through.
CBDCs are one of the greatest threats to freedom and liberty over the next 50 years. People should be very skeptical about giving this much control and surveillance power over to the government.
Are we doomed? After 08/11/23, yes we are.
As far as I understand, the parliament must vote now, but it doesn't look good. You may write to your MEP.
We should organize manifestations in streets and make it visible if we don't agree. Writing an email that just gets ignored seems polite but it hasn't worked so far.
this post was submitted on 08 Nov 2023
172 points (94.3% liked)
Europe
8324 readers
1 users here now
News/Interesting Stories/Beautiful Pictures from Europe 🇪🇺
(Current banner: Thunder mountain, Germany, 🇩🇪 ) Feel free to post submissions for banner pictures
Rules
(This list is obviously incomplete, but it will get expanded when necessary)
- Be nice to each other (e.g. No direct insults against each other);
- No racism, antisemitism, dehumanisation of minorities or glorification of National Socialism allowed;
- No posts linking to mis-information funded by foreign states or billionaires.
Also check out !yurop@lemm.ee
founded 1 year ago
MODERATORS