3 ms·
Well, the currently in-force "COUNCIL DECISION 2008/616/JHA" at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32008D0616 https://eur-lex.europa.e
by vmilner 6y ago
Well, the currently in-force "COUNCIL DECISION 2008/616/JHA" at
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32008D0616 https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A...
contains the same SHA-1 requirement, so the story seems to be that:
1) EU Law requires out-of-date encryption algorithms
2) The new agreement mirrors EU Law
3) From 1 Jan, the UK will be able to enact regulatory divergence, and use SHA-256 (or whatever) instead.
- viraptor 6y ago> From 1 Jan, the UK will be able to enact regulatory divergence Since this is for sharing the data internationally, no, changing it on one side doesn't make sense.
- vmilner 6y agoFor cross-border regulations like this you're quite right, but making sense is the reason for the UK not doing so, rather than it being a legal requirement.