Comment on EU Article 45 requires that browsers trust certificate authorities appointed by governments

• MeanEYE@lemmy.world ⁨1⁩ ⁨year⁩ ago

  Well, like I wrote in other comment of mine. Governments here issue personal certificates signed by government ones. These personal certificates can then be used to digitally sign documents and tax reports. It can be used to log into government web sites and many similar uses. These certificates that EU says browsers have to accept are the same ones everyone already uses for biometric passports. If browser accepted these root certificates, then things would be significantly easier to support. No software installation required.

  People seem to think this will be used for nefarious cases, but in reality people just install government issued software without thinking. Well, any software without thinking. During that installation you can already add certificate to browser and whole OS. It’s just easier and better supported if they go through public way instead of having to support multiple OS installations and similar issues.

  source

  • ShunkW@lemmy.world ⁨1⁩ ⁨year⁩ ago

    Yeah that argument holds zero water. Forcing browsers to trust these roots means not only pre-trusting them, but disallowing removal of trust. This is completely intended for surveillance purposes.

    source

    • MeanEYE@lemmy.world ⁨1⁩ ⁨year⁩ ago

      Removal of trust happened many times in the past. And like I said, it’s not changing anything other than making things easier. You can still add certificates to the browser trusted list if you have access to the person’s computer, which when you install any software you do. Perhaps the best middle ground would be to add certificates but make them conditional that is to say ask the user what they want to do and offer multiple options. Trust for this domain only, trust always, just this time, don’t trust.

      source

      • ShunkW@lemmy.world ⁨1⁩ ⁨year⁩ ago

        The current text of Article 45 requires that browsers trust CAs appointed by governments

        Tell me you didn’t read the article without telling me you didn’t read the article. You can keep shilling for government surveillance if you want.

        source

        • -> View More Comments
• rhizophonic@lemmy.zip ⁨1⁩ ⁨year⁩ ago

  Security from psyops. Duh …

  source