This title is clickbait. The proposed amendment to the framework is just excessively bureaucratic around the management of cert authorities. This might potentially result in browsers accepting certificates from authorities with a slightly dubious track record (according to browser vendors), yes, but the certificates themselves will not necessarily be "less secure" - which the layman typically interprets as "cryptographically weaker".
In practice, this would simply move a little bit of control over the list of accepted authorities from browser vendors to EU institutions, which is not terribly unreasonable a stance.
In fact, as time passes and authorities become more and more tech savvy, I expect this sort of thing to happen more and more. There is a lot of unaccountable authority (eh) in internet infrastructure, with special companies like Google and Microsoft (and yes, Mozilla too) effectively holding the keys to many kingdoms. Even if such power is used scarcely and wisely, there is a question of legitimacy.
In practice, this would simply move a little bit of control over the list of accepted authorities from browser vendors to EU institutions, which is not terribly unreasonable a stance.
In fact, as time passes and authorities become more and more tech savvy, I expect this sort of thing to happen more and more. There is a lot of unaccountable authority (eh) in internet infrastructure, with special companies like Google and Microsoft (and yes, Mozilla too) effectively holding the keys to many kingdoms. Even if such power is used scarcely and wisely, there is a question of legitimacy.