Last Chance to fix eIDAS: Secret EU law threatens Internet security (last-chance-for-eidas.org)

Article summary

The EU's eIDAS regulation may require web browsers to trust certificate authorities and cryptographic keys selected by EU governments, potentially enabling mass surveillance. This could allow governments to intercept encrypted web traffic and undermine existing oversight mechanisms. The proposal has been met with outcry from cybersecurity experts, researchers, and civil society groups. The regulation is expected to be voted on in the European Parliament in the first few months of 2024.

Main themes

• eIDAS regulation
• mass surveillance
• web security
• encryption
• EU governance
• internet fragmentation
• privacy concerns

What commenters say

• The proposed eIDAS regulation could compromise web security and enable mass surveillance by allowing governments to intercept encrypted web traffic.
• Some argue that users can simply remove or distrust the EU-approved certificates, but others point out that this may not be possible or practical for all users.
• The regulation is seen as an attempt by the EU to exert control over the internet and undermine encryption, with some viewing it as a power grab by governments.
• Others argue that the regulation is not necessarily intended to enable surveillance, but rather to provide a framework for trusted identities and authentication online.
• The lack of transparency and democratic oversight in the legislative process has been criticized, with some arguing that the EU is not following its own treaties and procedures.
• There are concerns that the regulation could lead to a fragmentation of the internet, with different regions having different security standards and protocols.
• Some commenters believe that the EU's actions are driven by a desire to protect its own interests and assert its influence over the global internet, rather than a genuine concern for security or privacy.