This obsession to continuously shorten the validity period of TLS certificates is just baffling. Claims to improve security without any actual evidence, and not a word about service disruption due to renewal failure...
Let's Encrypt announces 6 day validity and IP address #TLS certs
letsencrypt.org/2025/01/16/6…
Why quantum computers are probably not a threat worth your time and money (source: ches.iacr.org/2024/Jaques_CH…)
Sam retweeted
You will be able to use EU Digital Identity Wallets to access digital services, including certain private services.
Providers of private services must accept the wallets at the request of the wallet user where strong user authentication is required.
Sam retweeted
The first five Implementing Acts for the European Identity Wallet (Art. 5a & 5c #eIDAS 2 - Regulation) have been published in the EU Official Journal! They will enter into force (triggering the 2-year implementation period) as X-mas present on 24th Dec.: eur-lex.europa.eu/search.htm…
Sam retweeted
Draft ETSI TS 119 471 V0.0.11 (2024-11)
Policy and Security requirements for Providers of Electronic
Attestation of Attributes Services
docbox.etsi.org/esi/Open/Lat…
欧州のeIDAS2.0 は、DIWに限らず、「属性証明」に向かっていて、これは重要だよ。
The last 5 implementing acts on the #EUDIW are now up for public consultation until 27/12: ec.europa.eu/info/law/better…
Have a look and send your comments ! 🇪🇺 #eIDAS #eIDAS2 #EUWallet
LOL absolutely not, where did you get such hilarious nonsense ? Can't wait to tell the actual IA team, they will laugh pretty hard at that🤣
The opinion of a fake self-proclaimed expert is irrelevant to me 🙂 This diagram is wrong on many aspects, which hopefully will get clarified when the first implementing acts are published (soon). An hopefully QTSPs have a better understanding of where their opportunities lie.
Apparently some work is needed to make the ARF more comprehensible 🙁
QEAAs are not "Substantial LoA" credentials, and PID is not a special kind of "High LoA" QEAA that relies on a QTSP.
That's what I'm trying to do :) these topics were discussed during the negotiations on art. 5a and 5c of the regulation, but not at the level of implementing acts where this committee took place.
Unless you are talking about a different venue, your section about "most controversial amendment proposed" is incorrect🤷
The "public discussion" that D-Trust had to go through for their CCADB root store inclusion request was a disgrace. Under #eIDAS, CAB accreditation prevents random internet bullies from harassing respectable QTSPs.
groups.google.com/a/ccadb.or…
Sam retweeted
Now is your chance to get a first look at how EU Digital Identity Wallets will work thanks to a new video series 🔁 . You can watch the first intro video below, and stay tuned for explainers on the privacy dashboard, digital documents, and more. ⤵
France is not testing the EU Wallet, because neither the legal basis, nor the technical specifications, are complete yet. France Identité is something else.
Not all TLS certificates are created equal, and a thorough applicant verification is imperative 🤷 #eIDAS #QWAC
In August, watchTowr Labs hijacked parts of the global .mobi TLD - and went on to discover the mayhem that we could cause.
Enjoy....
labs.watchtowr.com/we-spent-…
