11_Johannes Sedlmei_Pol Hölzmer__QWAC.pdf

1、EU Policies Meet Global Practices The Discourse on Qualified Website Authentication Certificates(QWAC)Johannes SEDLMEIRActing ProfessorUniversity of MnsterGermanyPol HLZMERDoctoral ResearcherUniversity of Luxembourg,SnTLuxembourg2EU Policies Meet Global Practices:The Discourse on Qualified Website A

2、uthentication Certificates(QWAC)IntroductionSource:https:/securityriskahead.eu(Mozilla,2023)3EU Policies Meet Global Practices:The Discourse on Qualified Website Authentication Certificates(QWAC)About Us:QWAC controversy Phase 34EU Policies Meet Global Practices:The Discourse on Qualified Website Au

3、thentication Certificates(QWAC)until 2019Secure|https:/domain-Evil Corp Inc.US|https:/extended-http:/unsecure-https:/domain-https:/extended-Not Secure|http:/unsecure-European Gov.EU|https:/qualified-web-authn.euafter 2019after 2025?What Changed:Not much actually.Or actually,a lot?Draft Article 45(le

4、aked version)“QWACs shall be recognised by providers of web-browsers.”“Providers of web-browsers shall recognise and display the information in a user-friendly manner.“Providers of web-browsers shall not impose,for the purposes of recognition and display of QWAC,additional requirements”“The requirem

5、ents laid down in Annex IV shall be considered both necessary and sufficient to ensure the highest possible level of security for QWAC.”5EU Policies Meet Global Practices:The Discourse on Qualified Website Authentication Certificates(QWAC)Ecosystem:The WebPKI6EU Policies Meet Global Practices:The Di

6、scourse on Qualified Website Authentication Certificates(QWAC)Ecosystem:The WebPKI and eIDAS7EU Policies Meet Global Practices:The Discourse on Qualified Website Authentication Certificates(QWAC)Research DesignMultivocal Literature Review Academic Papers(n=4)(Entschew et al.,2022,2024;Martius et al.