News for hackers. Stuff that matters.
Re:Web browsers drop mysterious company with ties to U.S. mi... by dane-pgp on Thursday December 01, 2022 @01:11AM (#33812944)
> irrespective of how clearly untrustworthy that company is.

Isn't that a bit of an exaggeration? Surely what the EU is proposing is that browsers have to accept just those companies which pay the necessary fee and which some EU body declares to be trustworthy.

You're right, though, that this still adds to the attack surface, because now you have to trust not just your browser vendor, and all the CAs that they trust, but also this EU body and all the CAs that they trust.

(For those who haven't been following, here's what the EFF has to say about it: https://www.eff.org/fa/deeplinks/2021/12/eus-digital-identit... )

Re:Web browsers drop mysterious company with ties to U.S. mi... by tinus_hn on Thursday December 01, 2022 @02:25AM (#33813351)
What’s to prevent the EU from declaring itself trustworthy?
Re:Web browsers drop mysterious company with ties to U.S. mi... by josefx on Thursday December 01, 2022 @03:48AM (#33813865)
Its courts? At least that is the only thing that keeps the EU Commission from going full police state.
Re:Web browsers drop mysterious company with ties to U.S. mi... by tgv on Thursday December 01, 2022 @05:08AM (#33814389)
The EU Commission? You mean, the one without an actual police force or army, or any say over the member states' criminal legislation? That Commission?
Re:Web browsers drop mysterious company with ties to U.S. mi... by anticensor on Thursday December 01, 2022 @05:58AM (#33814749)
PESCO and Europol exist. Not a body of the EU commission, but still.
Re:Web browsers drop mysterious company with ties to U.S. mi... by josefx on Thursday December 01, 2022 @07:26AM (#33815330)
> or any say over the member states' criminal legislation? That Commission?

One of the jobs of the commission is deciding whether member states are in line with their treaty obligations, that includes any laws passed by said member states.

Re:Web browsers drop mysterious company with ties to U.S. mi... by simplotek on Thursday December 01, 2022 @05:31AM (#33814526)
> At least that is the only thing that keeps the EU Commission from going full police state.

Such an extraordinary claim.

Are you able to provide any evidence that supports your claim that at any time the EU Commission tried to go "full police state", and that courts kept that from happening?

Re:Web browsers drop mysterious company with ties to U.S. mi... by pmontra on Thursday December 01, 2022 @05:35AM (#33814561)
The Commission and the Parliament can do whatever they want but it's the Council that de facto has the final word on everything that matters.
Re:Web browsers drop mysterious company with ties to U.S. mi... by tinus_hn on Thursday December 01, 2022 @12:52PM (#33819832)
The EU court can only rule using laws written by the EU
Re:Web browsers drop mysterious company with ties to U.S. mi... by iso1631 on Thursday December 01, 2022 @04:44AM (#33814232)
That EFF page is really weird - English text, but right-aligned, with question marks to the left of the text, as if the text had been translated from a RTL language (Farsi perhaps given the /fa/ in the link?)

From the looks of it the EU wants to push out a wide spread identity management system, which is fine.

It's unclear to me after a brief perusal why they can't use a normal root certificate, or create their own along a letsencrypt line (indeed that would be a great benefit having another widespread free ACME powered certificate authority, one funded by the taxpayer), with the same protections and transparency as LE.

Re:Web browsers drop mysterious company with ties to U.S. mi... by DismantleMars on Thursday December 01, 2022 @06:24AM (#33814929)
>That EFF page is really weird - English text, but right-aligned, with question marks to the left of the text, as if the text had been translated from a RTL language (Farsi perhaps given the /fa/ in the link?)

It's just a Farsi link to an English article that's automatically applying RTL styling, the original version of the page in English looks fine.

https://www.eff.org/deeplinks/2021/12/eus-digital-identity-f...