Mozilla publishes position paper on the EU Digital Identity Framework
I wonder why QWACs are less secure than DV.<p>There is an argument why EV should be treated the same a DV I'm not buying that argument but for the moment let's accept it as true.<p>However, now Mozilla is arguing that EV is less secure than DV. That seems weird to me.<p>Currently, browsers have root certificates for lots of countries. I can imagine that for a country it becomes a huge problem if suddenly a major browser decides to reject certificates used by that country's government.<p>Of course, it would be nice if country certificates could be restricted to country specific resources. Maybe mozilla should push for that.