Since this regulation is not a standard to be used by the public but how governments of various countries interact, I don’t see the problem. Imagine they had o

Since this regulation is not a standard to be used by the public but how governments of various countries interact, I don’t see the problem. Imagine they had only specified “must be encrypted”. Now France is going with S/MIME with SHA1 but the UK with SHA-256. The French system didn’t anticipate this and the can’t decrypt it. Meanwhile Germany is using PGP and nobody can read anything. Long way to say: strong specs improve interoperability.