News for hackers. Stuff that matters.

A comment on Web browsers drop mysterious company with ties to U.S. military contractor. Parent comment

Re:Web browsers drop mysterious company with ties to U.S. mi... by ranguna on Thursday December 01, 2022 @05:06AM (#33814380)
> illegal in the EU for a browser to drop a CA, even when they’re caught doing objectively fraudulent acts.

Right now Mozilla, Microsoft and many other privately owned root certificate mainterns control whether or not CA are trust worthy. I actually see your statement the other way around, it would be illegal for browser to support a CA when the EU deems it as untrustworthy.

[ Parent | on HN ]
Re:Web browsers drop mysterious company with ties to U.S. mi... by olliej on Thursday December 01, 2022 @08:17AM (#33815814)
Do you really think that a CA shady enough for the EU to reject would not have already been rejected by the various root programs?
[ Parent | on HN ]
Re:Web browsers drop mysterious company with ties to U.S. mi... by ranguna on Sunday December 04, 2022 @07:17AM (#33852992)
I do not, hence this seems to be a non issue.
[ Parent | on HN ]
Re:Web browsers drop mysterious company with ties to U.S. mi... by anticensor on Friday December 02, 2022 @10:08AM (#33831434)
Browser vendors could solve the issue by distributing two editions of their browsers, one only trusting certificates accepted by the EU and one rejecting all the certificates in the list by the EU.
[ Parent | on HN ]