Makes sense, they are US company. I am surprised it took them that long.

"US company must obey US law" doesn't make for a very interesting headline.

"The world should stop trusting the US companies" OTOH...

more optimistic would be "World should decentralize America's trust"

The headline is more « US law is batshit and extends well beyond its borders with real world consequences »

This is not an example of that. It is perfectly within US jurisdiction to prevent US companies from doing business with sanctioned countries. That is the point of a sanction, and US is in good company in choosing to use sanctions as a diplomatic tool.

It is more of an example of how the internet/software industry is too consolidated to the US, and thus other countries are too dependent on the US in those areas. If the internet infrastructure was well distributed, then people in sanction countries could simply get certificates issued by a different CA, and in some cases they can. However, this is complicated by the fact that the list of trusted CAs is dominated by US organizations (Google, Mozilla, Apple, Microsoft). If you want to reach western audience you must use certs from a CA approved by them.

Exactly. Ever since I was a kid I never understood how the US has jurisdiction way beyond their borders.

Then I graduated in International Relations and understood that the hole is much deeper than that.

Now it's pretty obvious with all the shit that trump has been doing, but back then me and much of the people I know were oblivious to what US power really means.

The only countries that do not have sanctions are the ones who lack the economic leverage to do so. All developed countries have them.

US law is something US citizens get to decide. If they think it's "batshit", they should vote accordingly. In this case sanctions seem a pretty good alternative to going to war.

The US is an oligarchy. Voting in the US is completely irrelevant to which laws pass - there have been studies about this.

It's clear that those who voted recently for the President are getting what they wanted. Voting made a radical difference, even if the outcome isn't one I like. Whatever "studies" you read are obvious nonsense.

This is not specific to US law ...

To be fair the US is a bit on an outlier here, as it is not afraid to come down on US companies for things subsidiaries do in other jurisdictions, on questionable grounds. So it would not be enough for Let's Encrypt to operate a European operation to sign European certificates.

Should the US wish to sanction the Hague, somewhat famous for its international court of justice, they would absolutely go after ISRG and it would not be enough for them to sever the ties of the hypothetical Let's Encrypt Europe. That would not be legal or last least highly questionable in most other democratic countries.

[deleted]

It is however a reminder that "just use LE" is not a valid response to concerns about protocols/APIs/browsers/etc requiring TLS.

That's just another reminder that no one from outside of US should deal with US companies.

Of course not! just find viable alternatives to Microsoft, Apple, Mozilla, YCombinator, Google, Intel, AMD, ...

In all seriousness, as an American I'd love to see a healthier, more well-distributed tech industry, but I don't see many companies stepping up to provide competing services. It's my understanding that china has alternatives to many of these products/services, but I really don't see how anyone in Europe could possibly use a US-free internet.

> but I don't see many companies stepping up to provide competing services

Maybe because the US dropped most of its anti trust regulations, leading to ridiculously monopolistic practices such as "acquire everything that may be threatening".

When was the last time you heard about a European cellphone manufacturer, or social media network, or web browser being acquired by an American monopoly?

I can only think of Nokia, purchased by microsoft in 2014. Those phones ran windows CE before that even, so you could hardly have avoided the american tech industry.

All I'm trying to say is, it's impossible for Europeans to both A) be on the internet and B) avoid the US tech industry.

In the EU there is the threat of jail time if a user of your service does something bad and you haven't completed the necessary bureaucracy to be immune to it. This is the opposite of the US. See for example pissmail.

Nokia phones ran mostly on SymbianOS

Sorry, I stand corrected

that's why the world need to wake up. With the due respect of any political beliefs here, in the course of politics any country can be deemed the US enemy (or any other country's enemy as a matter of fact), so for example firing the 3/4 of the company because we have Claude and ChatGPT (US based) is a major business continuation flaw...