Logius: Staat der Nederlanden CA trust issue (WiV)

This case concerns a trust issue related to the Staat der Nederlanden CA, operated by PKIoverheid (Logius), following the enactment of the Dutch 'Wet op de inlichtingen- en veiligheidsdiensten' (WiV) law. The law grants the Dutch intelligence services new powers, including the ability to intercept encrypted communications, which raised concerns about potential misuse of the CA for man-in-the-middle attacks. The CA was requested to revoke its trust due to these implications for user security. The case was ultimately resolved with a WONTFIX status, indicating that no action was taken to revoke trust.

1. 2017-10-14 User reported vulnerability to MitM attacks due to new intelligence law.
2. 2022-11-14 Case marked as resolved with WONTFIX status.

1. 2017-10-14 Community commenter — Reported trust issue due to new law allowing intelligence services to intercept communications.
2. 2017-10-17 Mozilla representative — Requested comments to clarify the situation.
3. 2017-10-18 Logius representative — Indicated need to consult policy advisers regarding the issue.
4. 2017-10-31 Logius representative — Provided details on the checks and balances in place for PKIoverheid.
5. 2017-11-15 Mozilla representative — Expressed concerns about removing trust from government CAs without evidence of misuse.