• 0 Posts
  • 21 Comments
Joined 1 year ago
cake
Cake day: July 6th, 2023

help-circle



  • Thank you for the link! It helped putting things into proper nuance and context (indcluding throwing away that ridiculous notion that the ‘Steam Store’ and the ‘Steam Gaming Platform’ are two completly different things in different markets).

    However, reading the whole thing, it sounds to me like while the court dismissed some of the claims (1 to 4 and 7 apparently), they agreed that Wolfire and the other plaitiffs had the right to ‘plausibly allege unlawful conduct’ about the ‘Most-favored-nations restraints’ (the part where Steam forces publishers to set prices on all stores without steam keys being involved) without mentioning anything more on the subject.

    I’m not americain so I’m not sure if I understand correctly, but that means the ruling isn’t over and it’ll go into an appeal court, right?


  • Um, I’ve read the complaint from top to bottom and it claims way more than just ‘Valve wouldn’t give them keys to resell’ if they’re not at the same price as on steam. It also claims Valve puts a ‘Price Veto’ clause which allows them to delist games from Steam if the publisher gives bigger sales on other platforms, even if they do not using steam keys, which does sound super uncompetitive to me.

    Although I’ll agree the evidence listed in the complaint seem a bit on the light side. Do you know if the trial happened yet? And if so, do you know where I can find what resolution they reached?















  • The only mitm that can be done is at the server itself or in a website pretending to be the requested server. But for this to work, you need to have the private and public keys of the server you want to act like.

    Maybe I misunderstand what you’re saying, but since the wide majority of EU citizens use their ISP’s DNS, it’s trivial for them to mandate a domain redirection to another server which would act as a proxy of the original (and thus only need the original server’s public key).

    So far, the only protection we have against that are:

    1. Changing DNS (WAY too complicated for the average user, also brings the DNS’ own contry’s censorship)
    2. The fact that they wouldn’t have a valid certificate for it because any sensible CA would see it for what it is: a MITM.

    That’s why, to my understanding, this is such a big deal. At any point, ANY EU gov (and I want to emphasis that part because ot’s important in the context of tjhs law) can request a change of DNS from their ISP’s DNS (many already do right now) and emit a fully trusted certificate for the domain they want to MITM.