Prepare for possible weakening of HTTPS security by Europe's new proposed law
Open, HighPublic

Description

It looks like Europe is considering requiring the browsers to trust government HTTPS certificate authorities.

https://www.eff.org/deeplinks/2021/12/eus-digital-identity-framework-endangers-browser-security

If this amendment becomes law, it could tempt undemocratic countries across the globe to introduce mandatory CAs of their own in order to scan and manipulate Web traffic, something that has already been attempted in Kazakhstan. But this time it won't be easy for browsers to take a stand against such invasive measures...

Many people may soon find it impossible to safely download software from the Web, so please prepare ahead of time! Start discussing how to best set up an independent web of trust with other FOSS developers.

lordhelpus triaged this task as High priority.