Comment by crote
1 day ago
If they are solely doing it for legal reasons, I would expect some form of malicious compliance - like an accompanying blog post explaining how it'll be marked as "Firefox is legally required to tell you the EU considers this page safe. We disagree. [Learn More]" and that the mark will only be shown to EU users.
Complying to the exact letter of a stupid law to avoid getting sued is understandable. Voluntarily complying to the broadest interpretation without any pushback is not.
The problem with QWACs and eSTAZI is a saturation attack by govt. against people. If Mozilla will display that message it will need to do it on all connections with QWACs, and 99.99% will be safe, initially. So govt. can demand them to remove misleading message. And Mozilla can't detect when govt. will use their CA to do a MITM attack on their political opposition and display message only then.
Have you ever heard the phrase "show me the man and I'll show you the crime"? The Europeans have and will not be happy if Mozilla does something like this.