Joint statement of scientists and NGOs on the EU’s proposed eIDAS reform

Post by Thorrez » Fri, Nov 03, 2023, 1:34 PM UTC

EGreg wrote: post #15

radicalbyte wrote: post #12

If this goes through without change the browser vendors should implement an UX which allows the user to disable these root certificates; ideally within different contexts. I also hope that our community produces tools to allow the cert stack on our OSes to be purged of these certificates.

Then they’ll ban that UX. Just like US banned the ability to disclose how much taxes you pay for airline tickets EDIT: for clarification, they banned disclosing it in initial communications like emails. They can do same for browsers. Apple also successfully banned apps from disclosing links to buying stuff online etc.

Post by EGreg » Fri, Nov 03, 2023, 1:35 PM UTC

dwheeler wrote: post #2

"In summary, we strongly warn against the currently proposed trilogue agreement, as it fails to properly respect the right to privacy of citizens and secure online communications; without establishing proper safeguards as outlined above, it instead substantially increases the potential for harm." The Open Source Security Foundation (OpenSSF) has co-signed the Industry Joint Statement on Article 45 in the EU’s eIDAS R…

Post by EGreg » Fri, Nov 03, 2023, 1:39 PM UTC

Thorrez wrote: post #21

EGreg wrote: post #15

Earlier quoted context omitted.

Then they’ll ban that UX. Just like US banned the ability to disclose how much taxes you pay for airline tickets EDIT: for clarification, they banned disclosing it in initial communications like emails. They can do same for browsers. Apple also successfully banned apps from disclosing links to buying stuff online etc.

I can still see taxes and fees when I'm booking a flight. I just checked on delta.com . I can see the total taxes and fees, and the breakdown of what they are and how much each one is. I'm in the US.

Post by red_admiral » Fri, Nov 03, 2023, 1:41 PM UTC

EGreg wrote: post #23

dwheeler wrote: post #2

"In summary, we strongly warn against the currently proposed trilogue agreement, as it fails to properly respect the right to privacy of citizens and secure online communications; without establishing proper safeguards as outlined above, it instead substantially increases the potential for harm." The Open Source Security Foundation (OpenSSF) has co-signed the Industry Joint Statement on Article 45 in the EU’s eIDAS R…

Good morning. It has actually been happening all around the world, not just in the EU. Given how governments encroached on crypto and ad tech and social tech and in the last 10 years, the writing is on the wall for end-to-end encryption next. They have to know ALL your communications: I wrote a summary of the countries in the world that have already undermined it, banned it or on the way to banning it: https://commun…

Post by EGreg » Fri, Nov 03, 2023, 1:47 PM UTC

red_admiral wrote: post #27

EGreg wrote: post #23

Earlier quoted context omitted.

Good morning. It has actually been happening all around the world, not just in the EU. Given how governments encroached on crypto and ad tech and social tech and in the last 10 years, the writing is on the wall for end-to-end encryption next. They have to know ALL your communications: I wrote a summary of the countries in the world that have already undermined it, banned it or on the way to banning it: https://commun…

The pushback against ad tech - or more precisely tracking tech - is hardly the same thing. One of the EU's moves will greatly improve privacy, another one will harm it. A world is possible where we have end-to-end encryption AND a ban on profiling people online without their consent.