undefined | Better HN

0 pointsJensson2y ago0 comments

> This is still very bad.

Yes, potentially, but it isn't "another kind of chat control".

0 comments

It's another side of the efforts of going around encryption, chat controls deals with communication services, this one with browsers

JenssonOP2y ago

But this doesn't force browsers and sites to use weak encryption. It is very different.

g-b-r2y ago

This forces browsers to accept all the CAs approved by the EU states, and you can be certain that some of them will be used for decrypting (and if needed modifying) the traffic

1 more reply

no_time2y ago

Luckily, I never said anything like this anywhere.

raverbashing2y ago

Yes, I agree. The crying wolf is too much sometimes.

Accepting certificates from a given issuer does not give them the issuer the right to impersonate others

g-b-r2y ago

All root CAs can issue certificates for any site (except those with CAA records etc.)

j / k navigate · click thread line to collapse

0 comments

g-b-r2y ago

It's another side of the efforts of going around encryption, chat controls deals with communication services, this one with browsers

JenssonOP2y ago

But this doesn't force browsers and sites to use weak encryption. It is very different.

g-b-r2y ago

This forces browsers to accept all the CAs approved by the EU states, and you can be certain that some of them will be used for decrypting (and if needed modifying) the traffic

1 more reply

no_time2y ago

Luckily, I never said anything like this anywhere.

raverbashing2y ago

Yes, I agree. The crying wolf is too much sometimes.

Accepting certificates from a given issuer does not give them the issuer the right to impersonate others

g-b-r2y ago

All root CAs can issue certificates for any site (except those with CAA records etc.)

j / k navigate · click thread line to collapse