News for hackers. Stuff that matters.

A comment on Bad eIDAS: Europe ready to intercept, spy on your encrypted HTTPS connections. Parent comment

Re:Bad eIDAS: Europe ready to intercept, spy on your encrypt... by Dumble on Wednesday November 08, 2023 @07:30AM (#38189531)
The government would be able to obtain a certificate identical to the one of the a website owner (the real one), enabling the mitm attack (for example with the help of ISPs etc).
[ Parent | on HN ]
Re:Bad eIDAS: Europe ready to intercept, spy on your encrypt... by landgenoot on Wednesday November 08, 2023 @07:42AM (#38189608)
Yes, but you will see that the certificate authority suddenly switches to the Hungarian government, while reading an article.
[ Parent | on HN ]
Re:Bad eIDAS: Europe ready to intercept, spy on your encrypt... by Urd- on Wednesday November 08, 2023 @07:48AM (#38189669)
How would they get the private key? Or would this CA only allow using certs with private keys they generated instead of using CSRs?
[ Parent | on HN ]
Re:Bad eIDAS: Europe ready to intercept, spy on your encrypt... by ulrikrasmussen on Wednesday November 08, 2023 @07:52AM (#38189716)
Wouldn't Certificate Transparency make it very visible and obvious if they did that?
[ Parent | on HN ]
Re:Bad eIDAS: Europe ready to intercept, spy on your encrypt... by Avamander on Wednesday November 08, 2023 @05:33PM (#38198149)
CT would not be allowed if ETSI does not allow it. Neither would distrusting that mis-issuing CA be allowed.
[ Parent | on HN ]