Article 45 of the eIDAS Directive Unveils the need to implement the X.509 4-cornered trust model for the WebPKI - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2024

Article 45 of the eIDAS Directive Unveils the need to implement the X.509 4-cornered trust model for the WebPKI

Ahmad Samer Wazan
Imran Taj

Résumé

Article 45 of the new eIDAS Directive (eIDAS 2.0) has caused significant debate on the Internet as it gives European governments the power to make EU-certificated web certificates accepted without the approval of web browsers/OS, which are considered to be the current gatekeepers of the WebPKI ecosystem. This paper goes beyond the current debate between the WebPKI gatekeepers and the European Commission (EC) about the implications of Article 45. It shows how both approaches do not provide full protection to web users. We propose a better approach that Europe can follow to regulate web X.509 certificates: Rather than regulating the issuance of web X.509 certificates, the EC can play the role of a validator that recommends the acceptance of certificates at the web scale.
Fichier non déposé

Dates et versions

hal-04663451 , version 1 (28-07-2024)

Identifiants

Citer

Ahmad Samer Wazan, Romain Laborde, Abdelmalek Benzekri, Imran Taj. Article 45 of the eIDAS Directive Unveils the need to implement the X.509 4-cornered trust model for the WebPKI. TrustBus@ARES 2024, Jul 2024, Vienna Austria, France. pp.1-11, ⟨10.1145/3664476.3670900⟩. ⟨hal-04663451⟩
0 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Mastodon Facebook X LinkedIn More