kravietz 🦇 on Nostr: npub162ytz…540e7 Yes, per the current wording the QCA cannot sign a pure DV ...
npub162ytz6y0t7fwwdh8fmj02l82d749t2854puhnuz4gcye7dt4jy8qj540e7 (npub162y…40e7)
Yes, per the current wording the QCA cannot sign a pure DV certificate as it does not comply with the Annexe IV specification QWAC. And, unlike the commercial EV, there's a very tangible legal responsibility associated with such a violation.
Which is yet another reason why I don't buy the MITM FUD propagated by Mozilla — there's no way for a QCA to legally issue a fake certificate, as that would be a massive violation on so many layers, because every single Subject field would need to be faked, not only CN. And there's no way for any Member State government to absolve such a QCA even if they wanted.
npub12wfyg7nljr8h25apv0c2fvqd2l5dcmdymc9d3x7zdy2xtzztaysq7f8kwl (npub12wf…8kwl) npub199wcwgvkde7wnu22asa9qlg7wzlj4ff6s3qkmvsmgkffaep24nhqq6n803 (npub199w…n803) npub1llzxpc6c3w92hczu49dsxcfqkp5tl9f5e30urrgf2v8tqnu7pkgsww08cq (npub1llz…08cq)
Yes, per the current wording the QCA cannot sign a pure DV certificate as it does not comply with the Annexe IV specification QWAC. And, unlike the commercial EV, there's a very tangible legal responsibility associated with such a violation.
Which is yet another reason why I don't buy the MITM FUD propagated by Mozilla — there's no way for a QCA to legally issue a fake certificate, as that would be a massive violation on so many layers, because every single Subject field would need to be faked, not only CN. And there's no way for any Member State government to absolve such a QCA even if they wanted.
npub12wfyg7nljr8h25apv0c2fvqd2l5dcmdymc9d3x7zdy2xtzztaysq7f8kwl (npub12wf…8kwl) npub199wcwgvkde7wnu22asa9qlg7wzlj4ff6s3qkmvsmgkffaep24nhqq6n803 (npub199w…n803) npub1llzxpc6c3w92hczu49dsxcfqkp5tl9f5e30urrgf2v8tqnu7pkgsww08cq (npub1llz…08cq)