Mozilla publishes position paper on the EU Digital Identity Framework
I wonder why QWACs are less secure than DV.There is an argument why EV should be treated the same a DV I'm not buying that argument but for the moment let's accept it as true.However, now Mozilla is arguing that EV is less secure than DV. That seems weird to me.Currently, browsers have root certificates for lots of countries. I can imagine that for a country it becomes a huge problem if suddenly a major browser decides to reject certificates used by that country's government.Of course, it would be nice if country certificates could be restricted to country specific resources. Maybe mozilla should push for that.