This article isn't completely genuine. And it is important to understand that.

eIDAS came into effect in 2016 and was around the oversight of online identification. This PROPOSED change is around allowing the EU to impersonate anyone getting a CA that is valid in the EU.

Now this is concerning but will never pass. Your bank needs to be assured that their CA can only be validated by them. Your insurance agency, your ecommerce sites...

It won't work, it breaks network trust by definition.

As soon as they try to push this through, banks, insurance and tech companies will push back and this will die.

Banks don't want the security model to be undermined because it will have a massive impact on the escrow services which underpin the digital economy.

If the CA owner can be impersonated then your bank can be impersonated, your online vendor can be impersonated and your e-commerce is dead.

Dumb idea and won't happen.

Sorry, but this is on the level where I'll never trust EU... I rather liked this organization but this makes no sense.

Like, which children to protect are going to be manufactured this time?

This is the best summary I could come up with:

Lawmakers in Europe are expected to adopt digital identity rules that civil society groups say will make the internet less secure and open up citizens to online surveillance.

Thus, using a proxy in a man-in-the-middle attack, that government can intercept and decrypt the encrypted HTTPS traffic between the website and its users, allowing the regime to monitor exactly what people are doing with that site at any time.

How that compares to today's surveillance laws and powers isn't clear right now, but that's the basically what browser makers and others are worried about: government-controlled CAs being abused to issue certificates to websites that allow for interception.

An authority purge of this sort occurred last December when Mozilla, Microsoft, Apple, and later Google removed Panama-based TrustCor from their respective lists of trusted certificate providers.

"Article 45 forbids browsers from enforcing modern security requirements on certain CAs without the approval of an EU member government," the Electronic Frontier Foundation (EFF) warned on Tuesday.

Mozilla and a collection of some 400 cyber security experts and non-governmental organizations published an open letter last week urging EU lawmakers to clarify that Article 45 cannot be used to disallow browser trust decisions.

The original article contains 965 words, the summary contains 196 words. Saved 80%. I'm a bot and I'm open source!

https://nitter.cz/Rob_Roos/status/1722304545676497141?t=SDb1qsGpMC8CtZmNdc70mQ&s=19

The European Parliament and Member States just reached an agreement on introducing the Digital Identity, #eID.

Directly afterwards, #EU Commissioner Breton said: "Now that we have a Digital Identity Wallet, we have to put something in it...", suggesting a connection between #CBDC and eID.

They ignored all the privacy experts and security specialists. They're pushing it all through.

Are we doomed? After 08/11/23, yes we are.