• Sylocule@lemmy.one
    link
    fedilink
    English
    arrow-up
    0
    ·
    8 months ago

    But it’s not spyware. The eIDAS law proposes that governments can insert certificates that spoof the originator. A subtle difference.

    I really hope Mozilla don’t comply

    • NocturnalEngineer@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      8 months ago

      Still weakening encryption standards.

      It would force the inclusion of a “trusted root” into browsers & OSs with the purpose of allowing government entities to spoof certificates. As certificate pinning is becoming mainstream, I would assume it’ll require browser & app vendors to weaken those controls too.

      You’d hope ECHR’s prior ruling would block this too. For the exact same rationale.