2 ms·

Oh dear, shooting on one's foot once again. Fortunately, they cannot forbid a natural person from removing any given certificate. If this passes, I am sure we

Oh dear, shooting on one's foot once again. Fortunately, they cannot forbid a natural person from removing any given certificate. If this passes, I am sure we have blacklists and scripts for these in no time.

mbwgh 3y ago
I guess this is where client attestation comes into play.
- g_p 3y ago
  Or, proliferation of the English (US) or English (UK) versions of browsers, which refuse to (and are not obliged to) include any of these CAs... I suspect if this ever does play out, it could result in fewer people using "EU spec" browsers, and more people using the international overseas version, thus undermining the entire intention of the policy proposal. It seems a pretty safe bet no browser maker would ship these CAs to users outside of the EU (and maybe EEA).
  - mbwgh 3y ago
    That's great if you are not going to be legally and technically required to use these EU spec browsers to be able to access your online banking or any platform registered as doing business in Europe. The EU is playing the long game here I believe.
  - jahav 3y ago
    I suspect such versions won't comply with Cyber Resilience Act (=company would be on hook for a fine). Browsers are in category 2 iirc. Edit: rest of world might be fine(big maybe, these things have tendency to proliferate),eu citizens... screws are tightening.
justinclift 3y ago
New Firefox plugin: "Disable EU Certs"
- supriyo-biswas 3y ago
  EU court: serves Mozilla a court order to add the extension to the blocklist.xml file, a global blocklist of all extension IDs that users can’t install.
  - justinclift 3y ago
    Sure, and thereby begins yet another game of whack-a-mole as people create ever more elaborate workarounds.
    - g-b-r 3y ago
      and as ever less people have the working workaround
- Am4TIfIsER0ppos 3y ago
  Soon: "Mozilla removes plugin from website and prevents installation for weakening security"

mbwgh 3y ago

I guess this is where client attestation comes into play.

g_p 3y ago
Or, proliferation of the English (US) or English (UK) versions of browsers, which refuse to (and are not obliged to) include any of these CAs... I suspect if this ever does play out, it could result in fewer people using "EU spec" browsers, and more people using the international overseas version, thus undermining the entire intention of the policy proposal. It seems a pretty safe bet no browser maker would ship these CAs to users outside of the EU (and maybe EEA).
- mbwgh 3y ago
  That's great if you are not going to be legally and technically required to use these EU spec browsers to be able to access your online banking or any platform registered as doing business in Europe. The EU is playing the long game here I believe.
- jahav 3y ago
  I suspect such versions won't comply with Cyber Resilience Act (=company would be on hook for a fine). Browsers are in category 2 iirc. Edit: rest of world might be fine(big maybe, these things have tendency to proliferate),eu citizens... screws are tightening.

justinclift 3y ago

New Firefox plugin: "Disable EU Certs"

supriyo-biswas 3y ago
EU court: serves Mozilla a court order to add the extension to the blocklist.xml file, a global blocklist of all extension IDs that users can’t install.
- justinclift 3y ago
  Sure, and thereby begins yet another game of whack-a-mole as people create ever more elaborate workarounds.
  - g-b-r 3y ago
    and as ever less people have the working workaround
Am4TIfIsER0ppos 3y ago
Soon: "Mozilla removes plugin from website and prevents installation for weakening security"