Qualified certificates with qualified risks

The Chrome Security team warns that EU eIDAS Article 45 could limit browsers’ ability to enforce critical certificate security requirements, potentially undermining web security and user privacy for years. They support the goal of interoperable digital identities but urge lawmakers to revise Article 45 in line with calls from scientists and security experts.