[supriyo-biswas]

We had a recent MITM on jabber.ru[1] conducted by Germany, a EU state that was only detected because they failed to renew the MITM cert. I have no reason to believe making this easier isn’t one of the goals of EIDAS.

[1] https://notes.valdikss.org.ru/jabber.ru-mitm/

[chmod775]

How can you make this any easier? The ergonomics of letsencrypt are probably better than anything the EU could come up with.

Fair chance they'll just keep using letsencrypt.