Hacker News Reader

I guess this is where client attestation comes into play.

Or, proliferation of the English (US) or English (UK) versions of browsers, which refuse to (and are not obliged to) include any of these CAs...

I suspect if this ever does play out, it could result in fewer people using "EU spec" browsers, and more people using the international overseas version, thus undermining the entire intention of the policy proposal.

It seems a pretty safe bet no browser maker would ship these CAs to users outside of the EU (and maybe EEA).

That's great if you are not going to be legally and technically required to use these EU spec browsers to be able to access your online banking or any platform registered as doing business in Europe.

The EU is playing the long game here I believe.

I suspect such versions won't comply with Cyber Resilience Act (=company would be on hook for a fine). Browsers are in category 2 iirc.

Edit: rest of world might be fine(big maybe, these things have tendency to proliferate),eu citizens... screws are tightening.

Reply on news.ycombinator.com