Hacker News new | past | comments | ask | show | jobs | submit login

Oh dear, shooting on one's foot once again.

Fortunately, they cannot forbid a natural person from removing any given certificate. If this passes, I am sure we have blacklists and scripts for these in no time.




I guess this is where client attestation comes into play.


Or, proliferation of the English (US) or English (UK) versions of browsers, which refuse to (and are not obliged to) include any of these CAs...

I suspect if this ever does play out, it could result in fewer people using "EU spec" browsers, and more people using the international overseas version, thus undermining the entire intention of the policy proposal.

It seems a pretty safe bet no browser maker would ship these CAs to users outside of the EU (and maybe EEA).


That's great if you are not going to be legally and technically required to use these EU spec browsers to be able to access your online banking or any platform registered as doing business in Europe.

The EU is playing the long game here I believe.


I suspect such versions won't comply with Cyber Resilience Act (=company would be on hook for a fine). Browsers are in category 2 iirc.

Edit: rest of world might be fine(big maybe, these things have tendency to proliferate),eu citizens... screws are tightening.


New Firefox plugin: "Disable EU Certs"


EU court: serves Mozilla a court order to add the extension to the blocklist.xml file, a global blocklist of all extension IDs that users can’t install.


Sure, and thereby begins yet another game of whack-a-mole as people create ever more elaborate workarounds.


and as ever less people have the working workaround


Soon: "Mozilla removes plugin from website and prevents installation for weakening security"




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: