4 ms·
> illegal in the EU for a browser to drop a CA, even when they’re caught doing objectively fraudulent acts. Right now Mozilla, Microsoft and many other private
by ranguna 4y ago
> illegal in the EU for a browser to drop a CA, even when they’re caught doing objectively fraudulent acts.
Right now Mozilla, Microsoft and many other privately owned root certificate mainterns control whether or not CA are trust worthy. I actually see your statement the other way around, it would be illegal for browser to support a CA when the EU deems it as untrustworthy.
- olliej 4y agoDo you really think that a CA shady enough for the EU to reject would not have already been rejected by the various root programs?
- ranguna 4y agoI do not, hence this seems to be a non issue.
- anticensor 4y agoBrowser vendors could solve the issue by distributing two editions of their browsers, one only trusting certificates accepted by the EU and one rejecting all the certificates in the list by the EU.