EU Digital Identity framework (eIDAS) another kind of chat control?


Level 78
Thread author
Honorary Member
Top Poster
Content Creator
Apr 24, 2016
The proposed EU Digital Identity framework (eIDAS) aims to meddle with the process around internet certificates and will undermine the independence and security assurances of the basis for website security:
  1. A certificate contains the website's identity (name, etc.) and its public key for encryption and signing. It is endorsed by trusted organizations that undergo regular audits. This process enables browsers to verify that the website we visit is authentic (thus avoiding "man-in-the-middle" attacks) and establishes an encrypted connection.
  2. Articles 45 and 45a stipulate that web browsers must recognise a new form of certificate issued by any EU state , potentially compromising the encryption and most of all trust and overall security of the web.
  3. This situation bears similarity to the controversy surrounding "chat control", as it implies that authorities could intermediate all traffic, decrypting communications sent over services using these certificates.
In summary, eIDAS Article 45 and 45a represent a dangerous intervention in a system that is essential to securing the Internet.

Mullvad is against these proposed articles.

Time perspective:
  • 8th November – political (trilogue) agreement sign-off
  • End of November to mid-December: Council & Parliament votes (both in Committee & Plenary)
Industry letter

Read more

Can we agree on the facts about QWACs?

Mozilla | QWACs - #SecurityRiskAhead EU -


About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.