Amelia, I read your blog (see link in the post below) and wish to thank you for your work and for your amendments to the eIDSA. In particular, I support how you'd move art. 11 to art. 4a and the additions brought there. It seems that, if techniques like OAuth 2.0 or similar --based on pseudonyms like email addresses-- take root, then mailbox providers may become the trust service providers of choice for a number of mundane transactions, including shopping and subscriptions to newsletters and mailing lists. The ability to generate pseudonyms ad-hoc (the part before the "@") can allow complete anonymity, and possibly trace unwanted leakage of the pseudonym itself. In addition, a provider chosen by the data subjects can register such transactions on their behalf: Any other method for acquiring consent ends up being registered on the processor's side only, which I consider unfair of Directive 95/46/EC. Regards A mailbox provider -------- Original Message -------- From: Patrik Fältström <patrik@frobbit.se> Date: Mon, 22 Apr 2013 10:00:07 +0200 To: cooperation-wg@ripe.net <cooperation-wg@ripe.net> Subject: [cooperation-wg] EU proposa on qualified signatures All, There is as some of you might know a discussion in EU related to e-ID and a new proposed regulation on trust services. One summary of the situation is made by member of the European Parliament Amelia Andersdotter that criticizes the proposal that is on the table for the parliament. I have personally had problems with the original directive, and this proposal even more as it tries to enforce onto people and organisations who to trust. Or more specifically, who you should trust as a trusted third party. I think federated solutions are better as "one size does not fit all", and with federated solutions one can more easily build services the way "it was intended" on the Internet. Anyway, here is the summary by Amelia, and maybe we should spend some time on this in Dublin, if people are interested? http://ameliaandersdotter.eu/eid-and-trust-services-regulation/ Patrik