Hacker News new | ask | show | jobs
by g-b-r 962 days ago
It's another side of the efforts of going around encryption, chat controls deals with communication services, this one with browsers
1 comments

But this doesn't force browsers and sites to use weak encryption. It is very different.
This forces browsers to accept all the CAs approved by the EU states, and you can be certain that some of them will be used for decrypting (and if needed modifying) the traffic
And then you can just tell the browser to not trust those CAs and you are safe. This is nothing like "chat control". This only lets the government spy on people who don't care if the government spies on them.
IIRC one cannot tell the browser to not trust root CAs, that's why all the fuss.
Why shouldn't you be able to do that? Seems like a simple thing to implement. I get why they want a hardcoded list, but I don't get why you can't add a way to block parts of that hardcoded list.
web-browsers shall ensure