In a well-intentioned yet dangerous move to fight online fraud, France is on the verge of forcing browsers to create a dystopian technical capability. Article 6 (para II and III) of the SREN Bill would force browser providers to create the means to mandatorily block websites present on a government provided list. Such a move will overturn decades of established content moderation norms and provide a playbook for authoritarian governments that will easily negate the existence of censorship circumvention tools.

While motivated by a legitimate concern, this move to block websites directly within the browser would be disastrous for the open internet and disproportionate to the goals of the legal proposal – fighting fraud. It will also set a worrying precedent and create technical capabilities that other regimes will leverage for far more nefarious purposes. Leveraging existing malware and phishing protection offerings rather than replacing them with government provided, device level block-lists is a far better route to achieve the goals of the legislation.

  •  Hotzilla   ( @Hotzilla@sopuli.xyz ) 
    link
    fedilink
    72
    edit-2
    11 months ago

    This is just plain stupid.

    Forcing browser to block certain sites is like making car manufacturers make the car shutdown if you are trying to smuggle foreign cheese in to France.

    Tech illiterates making the decision here.

  •  Otter   ( @otter@lemmy.ca ) 
    link
    fedilink
    English
    3011 months ago

    Could companies just refuse, and place a “this product is not available in your country” on the download page

    If people download the incompatible browser anyways then ¯⁠\⁠_⁠(⁠ツ⁠)⁠_⁠/⁠¯

        •  aranym   ( @aranym@lemmy.name ) OP
          link
          fedilink
          22
          edit-2
          11 months ago

          Do you genuinely believe an average computer user, when presented with a block page, would attempt to circumvent it?

          Maybe a small minority would, but overall I find it extremely unlikely. It takes a lot less effort to just download an alternative.

          • The average computer user is terrified of change so if they couldn’t dl chrome they’d mass google 'how to download chrome when blocked ', then land on a reddit thread of people complaining they can’t dl chrome where someone posts the exe or msi and leap on it.

            •  aranym   ( @aranym@lemmy.name ) OP
              link
              fedilink
              12
              edit-2
              11 months ago

              We’ve already seen this play out in several countries where web blocking is widely implemented (eg Russia, China.) People (generally) flock to state-endorsed alternatives rather than going through the effort of finding bypasses.

              (As an aside, Chrome would probably comply with it. It’d be a lot more damaging for them than smaller browsers to block the entirety of France.)

              • China’s a bit of a bad example as it’s got extremely heavy cultural indoctrination that reinforces the tactic - and even then it’s not entirely successful.

                Russia is notoriously the home of lip service while violating the letter of the law in every way imaginable

    •  gaael   ( @gaael@beehaw.org ) 
      link
      fedilink
      13
      edit-2
      11 months ago

      It’s not just right now : this president has been here since 2017 and most of the core ministers are the same since then.

      They have been cracking down on civil liberties from the start, but they make it more and more obvious since 2022 (because there is no re-election possible after 2 terms). Using anti-terrorist special legislatilns against environmental and himan rights activists, making demonstrations repression ever more violent…

      At the same time, to guarantee that pseudo-centrist (actually right wing) keep getting elected, they have worked to make the far right more powerful. This way, in every election, they can end up being the “rational” choice.

      • Exactly. Besides, I really do believe they are stupid enough to believe their bullshit will allow them to keep winning at the polls. I’m not so sure anymore… The fascists are ready and our state is turning a blind eye.

      • Disclaimer, I’m not French. But it seemed like the alternative was Le Pen and from what I’ve read she would certainly be more of a shitstain fascist, just with a populist tinge.

        • Yup. We voted for him in the second turn of the elections because, it was either that or facism… and we got facism-lite (less and less lite, with each passing day) laying the ground work and colluding with Le Pen and her cronies. Fucking wonderful.

        • We basically had the choice between eating shit or eating a cheese pie with shit inside. Next time I’m afraid people are simply going to give up or eat the actual shit because “at least it’s honest”.

          Fuck Macron and fuck fascists.

    • I’ve said it already, and I’m saying it again :

      France politics have 3 paths :

      • Kinda extreme left ; anti vaxxers, anti nuclear, pro islam, pro immigration, anti NATO, anti Europe, pro-russia and pro-dictatorships overall (Mélenchon)

      • Extreme right : anti ecology, deeply pro-rich (anti union), overall neo-fascists as you would except, very much anti Europe, anti NATO, pro-putin and pro-russia. (le Pen)

      • Macron, who is pro-rich, but not pro-putin and kinda Nato-friendly and Europe friendly.

      We need to build back guillotines.

      • C’est tellement n’importe quoi comme généralisation que c’en serait presque drôle si ce n’était pas grave. Dire que ia France Insoumise c’est l’extrême gauche antivax, sérieux, un peu de culture politique ça ferait pas de mal, non ? Vous êtes à deux doigts d’écrire que ce sont des islamo-gauchistes. Et c’est quoi cette description toute gentille du macronisme ? Le macronisme est une nouvelle émanation de l’extrême centre comme on peut le voir depuis des années. Anti-syndicat, anti-peuple, neo-libéral etc.

        Au moins vous avez bien décrit l’extrême droite, félicitations, 1 sur 3 c’est pas mal.

        Edit: English version

        It’s such an absurd generalization that it would be almost funny if it wasn’t serious. To say that France Insoumise is the extreme left antivax, seriously, a little political culture would not hurt, right? You’re about to write that they are Islamo-leftists. And what is this nice description of Macronism? Macronism is the new emanation of the extreme center as we can see for years. Anti-syndicate, anti-people, neo-liberal etc.

        At least you described the far right well, congratulations, 1 out of 3 is not bad.

        • Fi est très proche de eelv , et Jadot est un antivax, ça sert a rien de le cacher. Je crois que Mélenchon a déjà critiqué les vaccins par le passé, mais sur le coup je peux me tromper.

          Par contre, globalement lfi est plutot pro-islam ( https://www.lefigaro.fr/politique/loi-separatisme-plutot-que-l-islamisme-les-deputes-insoumis-preferent-s-attarder-sur-le-christianisme-20210204 , anecdotique + lefigaro, mais bon)

          Et oui pour Macron c’est 100% de la version simplifiée et gentille, j’ai pas mis qu’il transformait la France en état policier, que c’était un menteur et un destructeur de démocratie, c’est vrai.

          Et merci pour le compliment pour notre extrême droite :p

          Ça se voit que je déteste tout le monde sans exception ?

          (Sorry for English viewers, I’m not translating that)

          • J’ai pour politique de ne pas échanger plus de 2 messages aller-retour sur Internet donc ceci sera ma dernière réponse.

            Jadot est ouvertement anti-NUPES et anti-LFI, utiliser une hypothétique proximité entre LFI et EELV pour les associer à Jadot afin de justifier l’argument “LFI est antivax” c’est d’un ridicule sans nom. Ah, si, ça a un nom, ça s’appelle un syllogisme.

            Ensuite, ça veut dire quoi “pro-islam” ? Pro “terrorisme islamiste” ou “pro laissons les musulmans tranquille, la France est un pays laïc dans le sens où le pays n’a pas de religion officielle et toute religion est acceptée tant qu’elle ne contrevient pas aux principes républicains et autres conditions” ? Si c’est le premier cas, c’est grave de dire ça, si c’est le deuxième cas, où est le problème ? Je vis dans une ville avec une grande communauté musulmane, je souhaite un bon Aïd à mes connaissances, ils savent que je suis athée et s’en branlent complètement et on vit très bien tous ensemble.

            Détester tout le monde sans exception c’est dans le même ordre d’idée que “tous pourris”. Sauf que parmi les “tous pourris” on a eu ceux qui ont mis en place la sécu, les congés payés, la retraite solidaire, l’assurance chômage, l’abolition de la peine de mort, le mariage pour tous et toutes et bien d’autres évolutions sociétales (et ceci inclus en effet beaucoup de personnalités de gauche mais aussi des personnalités de la droite gaulliste). Et de l’autre on a ceux qui veulent le retour à l’état policier et la destruction du droit du travail et autres acquis sociaux. Mais sans aucune nuance et en disant “tous pourris” on se permet de cacher son inculture politique et son absence totale d’humilité face à celles et ceux qui ont eu et ont encore à coeur de faire de leur pays un endroit agréable pour toutes les personnes qui le composent.

            En soit, ce n’est pas grave de ne rien savoir sur la politique comme vos différents commentaires le montrent, ce qui est grave c’est de penser que vous y comprenez quelque chose au point d’aller expliquer comment ça fonctionne à d’autres personnes qui n’y connaissent rien et auront beaucoup de mal à savoir que vous racontez n’importe quoi.

            Petit conseil, arrêtez d’écrire pendant un certain temps et allez plutôt lire des choses sur “je sais que je ne sais pas”, “the more I know, the less I know”, Dunning-Kruger et autres principes assez important sur notre (in)capacité à évaluer notre savoir et sa pertinence.

      • Didn’t he say that NATO is braindead.

        Though in that instance it’s not really about politics, he’s simply pushing long-standing French security doctrine which insists on strategic autonomy but also wants the whole of Europe to be strategically autonomous so a) the French don’t have to foot the bill alone and b) the US has less opportunity to klutz their dick around.

        • The problem is that they described the system in a wrong way. Mélenchon is not extreme left. But yes, we have big issues with the way politics are conducted under Macron, it’s the first time that the population is despised that much by the executive power.

  • While I could see maybe the larger companies operating in France agreeing to implement this, I don’t think they would be able to legally force a smaller foreign open source browser developer into the same practice? Take qutebrowser for instance, the developer is from Switzerland. Unless their website is hosted in France, I don’t see how French law applies to him, nor the site he is hosting the browser on? They would have to use ISPs to block the website, but even then, you could still get it through GitHub. Maybe GitHub could be forced into removing the browser as Microsoft probably have a French office, but it still seems like a legal and practical nightmare to actually enforce this through the browser. As someone else mentioned, pushing rules on ISPs seems like a more doable thing if you WANT to oppress people (which I am also against of course).

  • France is a fallen democracy. It became law after law more authoritarian in an Orban/Poland style. The last move of the government give some ints if the politics are still in power or if it become a police state. For those who aren’t aware of this last move in the country, after nearly killing someone, a cop was preventively put in jail according to the law. Nothing wrong here. But, the police unions voiced this was not acceptable and made proposal so cops could not jailed preventively. The gov just said “we are going to look at the proposal” without rejecting them even if these proposal are against the rule of law and Principe of democracy.

    More about this shitshow

  • Interesting share. Thanks.

    I live in France and we are more interested in the part of this law that wants to put age restrictions on pornographic websites, so this is the first I’ve heard of it.

    Jean-Noël Barrot, a business school graduate, is Minister for Digital Transition and Telecommunications. He is the leader on this project.

    As noted by Mozilla, it comes down to 2 paragraphs, but I’ve included the paragraphs before and after below. This law overlaps with European regulation too:

    Article 6

    1. Article 12 of the aforementioned law no. 2004-575 of June 21, 2004 reads as follows:

    2. "Art. 12 - I. - When one of its specially designated and empowered agents observes that an online public communication service is clearly carrying out operations constituting the offences referred to in articles 226-4-1, 226-18 and 323-1 of the French Penal Code and article L. 163-4 of the Monetary and Financial Code, the administrative authority shall give formal notice to the person whose activity is to publish the online public communication service in question, provided that it has made available the information referred to in article 1-1 of the present law, to cease the operations constituting the offence observed. It also informs the offender of the precautionary measure referred to in the second paragraph of paragraph I of this article, and invites the offender to submit his or her observations within five days.

    3. "At the same time, the administrative authority notifies the electronic address of the service concerned to Internet browser providers within the meaning of Article 2, paragraph 11 of Regulation (EU) 2022/1925 of the European Parliament and of the Council of 14 September 2022 on fair and competitive contracts in the digital sector and amending Directives (EU) 2019/1937 and (EU) 2020/1828, for the purposes of implementing precautionary measures.

    4. "As a precautionary measure, the recipient of a notification shall immediately take all necessary steps to display a message warning the user of the risk of prejudice incurred in the event of access to this address. This message is clear, legible, unique and comprehensible, and enables users to access the official website of the public interest grouping for the national system to assist victims of cyber-malicious acts.

    source

    •  jarfil   ( @jarfil@beehaw.org ) 
      link
      fedilink
      3
      edit-2
      11 months ago

      display a message warning the user

      Do I understand correctly, that browsers would NOT BLOCK the access, but just have to display a warning?

      If that’s the case, then Mozilla’s defense of using Google’s services to decide when to display such warning, instead of allowing France to create non-Google mechanisms to achieve the same, seems like a mistake.

      •  bbbhltz   ( @bbbhltz@beehaw.org ) 
        link
        fedilink
        English
        411 months ago

        I read through the entire thing, in French, and it references several other laws and European regulations. The browser part is only in those paragraphs of the bill, but those paragraphs are referenced throughout the bill so there might be more to it. The whole bill is 91 pages long.

        It was adopted on 5 July, by the way…

        The blog post from Mozilla does say, “France’s browser-based website blocking proposal will set a disastrous precedent for the open internet,” so the precedent here is what they’re worried about.

  •  jet   ( @jet@hackertalks.com ) 
    link
    fedilink
    English
    911 months ago

    I’m philosophically against this idea. But on the other hand why is this being implemented in the browser? Why isn’t France asking it’s ISPs to block the hosting address of the sites. Or the DNS. Going after the endpoints it seems silly. Because now every single browser in the country is going to have a list of the " good websites ".

    •  Jomn   ( @Jomn@jlai.lu ) 
      link
      fedilink
      511 months ago

      France already does DNS blocking. It honestly has near to no impact, since targeted websites (usually digital piracy related stuff) just change the domain.

      •  jet   ( @jet@hackertalks.com ) 
        link
        fedilink
        English
        211 months ago

        I think most governments who roll out censorship infrastructure don’t really care about whatever they’re actually censoring, they have some juicy target that will come along later like a political rival they miscategorize. To cut them off. They’re building the toolbox they don’t care about the excuse.

        So yeah pirate sites give them an excellent reason to say oh we need better tools, but they don’t care about piracy, not really

  • This is how you end up with no browsers except Opera and Edge.

    I’m just glad it isn’t the UK proposing something this dumb. We’re doing enough stupid shit as it is.

  •  simonced   ( @simonced@lemmy.one ) 
    link
    fedilink
    English
    611 months ago

    If they don’t want browsers to access the site, why keeping the site open in the first place? And if only regulated people have to access it, they can just share a ssh key or something to grant access, I don’t see big problems here. Am I missing something?

  • The article is not very clear about what exactly the proposal mandate. Create the means for browser to block websites, or forces browser to block certain websites by the geolocation they are operating in?

    Because I don’t understand how the later would work.

    From the wording it seems like they are only asking browser developers to provide a function to block websites. (maybe byimporting a block list?)

    • I think they do not know this themselves. France had already implemented a black list on DNS level. F.i. library genesis links cannot be reached through standard DNS.

      I figure they think that that’s not oppressive enough.