‘Dangerous’ EU web authentication plan threatens to undercut browser-led certification system, detractors claim