Mullvad VPN

EU Digital Identity framework (eIDAS) another #chatcontrol?

https://mullvad.net/blog/2023/11/2/eu-digital-identity-framework-eidas-another-kind-of-chat-control/

EU Digital Identity framework (eIDAS) another kind of chat control? - Blog | Mullvad VPN

The proposed EU Digital Identity framework (eIDAS) aims to meddle with the process around internet certificates and will undermine the independence and security assurances of the basis for website security:

Mullvad VPN
Nov 2, 2023 at 6:58amWeb
Show threadApicultor 🐝Nov 2, 2023

@mullvadnet Did you accidentally some words?

>2. Articles 45 and 45a stipulate that web browsers must recognise a new form of certificate issued by any EU state has , potentially compromising the encryption and most of all trust and overall security of the web.

Show threadnoodlejetski Nov 2, 2023
@apicultor @mullvadnet probably a leftover of some syntax editing. "any EU state has issued" -> "issued by any EU state".
Show threadApicultor 🐝Nov 2, 2023

@mullvadnet I've heard this song before...

https://pkic.org/2014/07/24/in-the-wake-of-unauthorized-certificate-issuance-by-the-indian-ca-nic-can-government-cas-still-be-considered-trusted-third-parties/

In the Wake of Unauthorized Certificate Issuance by the Indian CA NIC, can Government CAs Still be Considered “Trusted Third Parties”?

Short answer: Government CAs can still be considered “trusted third parties,” provided that they follow the rules applicable to commercial CAs. Introduction On July 8 Google announced that it had discovered several unauthorized Google certificates issued by the National Informatics Centre of India. It noted that the Indian government CA’s certificates were in the Microsoft Root Store and used by programs on the Windows platform. The Firefox browser on Windows uses its own root store and didn’t have these CA certificates.

Show threadMartin S 🚩❤️✊ 🇵🇸🇺🇦Nov 2, 2023
@mullvadnet I think comparing this to chat control is a fallacy. True, if there was an equivalent of the great firewall of China, it could work as what you paint as a risk. However, there is no such mechanism and likely never will. I might very well be wrong and underestimate the dangers, but chat control it ain’t. Please elaborate on a feasible scenario where this would be a risk to EU citizens.
Show threadUrsidinoj/The BjornsdottirsNov 2, 2023
@krampus @mullvadnet Look up what recently happened to jabber.ru
Show threadXerz 💗Nov 2, 2023
@mullvadnet worth attaching: https://last-chance-for-eidas.org/
Last Chance for eIDAS

13 days before the first eIDAS vote, still no public text