> and are not allowed under any circumstance to remove those root certificates Browsers would be forbidden from just deciding on their own to remove a root, bu

> and are not allowed under any circumstance to remove those root certificates Browsers would be forbidden from just deciding on their own to remove a root, but I imagine trust agents can lose their status and get removed from all browsers if they misbehave. Decision on removal would lie with some EU agency though, not with individual browsers. Do you have some more information about the actual differences between the requirements? I'd be interested to know and the article is certainly not telling them. > mostly related to name collisions, and the mostly manual process of vetting information being prone to errors What name collisions are those? If it's the old issue with confusing company names, the new certificates are supposed to contain a street address and a unique identifier to resolve that.