3 ms·

Sadly, this isn't the case. I keep bringing it up since people forget about it: in 2006 the EU adopted the Data Retention Directive that forced all ISPs to sav

Sadly, this isn't the case. I keep bringing it up since people forget about it: in 2006 the EU adopted the Data Retention Directive that forced all ISPs to save the browsing history of everyone. https://en.wikipedia.org/wiki/Data_Retention_Directive https://en.wikipedia.org/wiki/Data_Retention_Directive It was eventually declared invalid by the European court of human rights, but it was still in effect for many years. Countries that did not implement this (eg Romania because their constitutional court found it illegal) were sued by the EU commission. The EU's attempts to spy on people go back decades. You'll also note that government gets exemptions from all the privacy stuff the EU pushes. I hope the EU changes course on this, but as with their handling of other tech... I'm not holding my breath.

codedokode 2y ago
Is that directive the reason why website operators do not want to implement ECH (Encrypted Client Hello) which allows to encrypt server name in TLS connection? I tried googling this, but Cloudflare blog only says that they disabled ECH without disclosing the reasons: [1] [1] https://community.cloudflare.com/t/early-hints-and-encrypted-client-hello-ech-are-currently-disabled-globally/567730 https://community.cloudflare.com/t/early-hints-and-encrypted...
- stavros 2y ago
  They never re-enabled it?
  - codedokode 2y ago
    No, and other sites seem to not support it. This is a list of top 10 000 sites and it seems that virtually nobody supports this TLS extension: https://divested.dev/misc/ech.txt https://divested.dev/misc/ech.txt .
    - stavros 2y ago
      That's a real shame, I wonder if the decision to not enable it really is coming "from above".
akira2501 2y ago
"Welp.. funding terrorists and then pretending like we're afraid of them didn't work, how about we fund child pornographers and then pretend like we just can't catch them if encryption exists." Typical modern law enforcement incompetence. They don't care about you. They just want to protect their access to your data.
petre 2y ago
> Countries that did not implement this (eg Romania because their constitutional court found it illegal) were sued by the EU commission. This is funny because the secret service abuses citizens' privacy in Romania all the time. But this turned against corrupt politicians which is probably why they sued. The secret service wiretapped them and gave the recordings to the anti-corruption directorate which was then led by the current EPPO chief prosecutor. Some high level politicians ended up in prison after much friction, but in the end a few heads had to roll in order to at least give the impression of fighting corruption, which the US Embassy and the EU asked for. Romanian establishment parties would vote anything that comes out of the Comission. CSAM? They will vote for it. The opposition is basically Kremlin funded right wingers which were barred even from joining Viktor Orban's conservative group and two small parties like Macron's, one which didn't get any votes and the other has like three MEPs after making an alliance with two other small parties. If the right wingers vote against CSAM it's just to sabotage the EU decision process.

codedokode 2y ago

Is that directive the reason why website operators do not want to implement ECH (Encrypted Client Hello) which allows to encrypt server name in TLS connection? I tried googling this, but Cloudflare blog only says that they disabled ECH without disclosing the reasons: [1] [1] https://community.cloudflare.com/t/early-hints-and-encrypted-client-hello-ech-are-currently-disabled-globally/567730 https://community.cloudflare.com/t/early-hints-and-encrypted...

stavros 2y ago
They never re-enabled it?
- codedokode 2y ago
  No, and other sites seem to not support it. This is a list of top 10 000 sites and it seems that virtually nobody supports this TLS extension: https://divested.dev/misc/ech.txt https://divested.dev/misc/ech.txt .
  - stavros 2y ago
    That's a real shame, I wonder if the decision to not enable it really is coming "from above".

akira2501 2y ago

"Welp.. funding terrorists and then pretending like we're afraid of them didn't work, how about we fund child pornographers and then pretend like we just can't catch them if encryption exists." Typical modern law enforcement incompetence. They don't care about you. They just want to protect their access to your data.

petre 2y ago

> Countries that did not implement this (eg Romania because their constitutional court found it illegal) were sued by the EU commission. This is funny because the secret service abuses citizens' privacy in Romania all the time. But this turned against corrupt politicians which is probably why they sued. The secret service wiretapped them and gave the recordings to the anti-corruption directorate which was then led by the current EPPO chief prosecutor. Some high level politicians ended up in prison after much friction, but in the end a few heads had to roll in order to at least give the impression of fighting corruption, which the US Embassy and the EU asked for. Romanian establishment parties would vote anything that comes out of the Comission. CSAM? They will vote for it. The opposition is basically Kremlin funded right wingers which were barred even from joining Viktor Orban's conservative group and two small parties like Macron's, one which didn't get any votes and the other has like three MEPs after making an alliance with two other small parties. If the right wingers vote against CSAM it's just to sabotage the EU decision process.