<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi,</p>
<p>FYI: relaying the following exchanges about the topic of the
Cyber Resilience Act which is in development in the EU and has
strong and worrying implications for all open source software
distributed in Europe and/or with European contributors. Cf
<a class="moz-txt-link-freetext" href="https://en.wikipedia.org/wiki/Cyber_Resilience_Act">https://en.wikipedia.org/wiki/Cyber_Resilience_Act</a> for an intro on
the topic</p>
<p>Even<br>
</p>
<div class="moz-forward-container"><br>
-------- Message transféré --------
<table class="moz-email-headers-table" cellspacing="0"
cellpadding="0" border="0">
<tbody>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Sujet :
</th>
<td>Re: [Qgis-psc] European CRA and its implications</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Date : </th>
<td>Wed, 19 Jul 2023 10:40:12 +0200</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">De : </th>
<td>Marco Bernasocchi via QGIS-PSC
<a class="moz-txt-link-rfc2396E" href="mailto:qgis-psc@lists.osgeo.org"><qgis-psc@lists.osgeo.org></a></td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Répondre
à : </th>
<td>Marco Bernasocchi <a class="moz-txt-link-rfc2396E" href="mailto:marco@qgis.org"><marco@qgis.org></a></td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Pour : </th>
<td>Andreas Neumann <a class="moz-txt-link-rfc2396E" href="mailto:andreas@qgis.org"><andreas@qgis.org></a></td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Copie
à : </th>
<td>QGIS PSC List <a class="moz-txt-link-rfc2396E" href="mailto:qgis-psc@lists.osgeo.org"><qgis-psc@lists.osgeo.org></a></td>
</tr>
</tbody>
</table>
<br>
<br>
<div dir="auto">
<div>Hi Andreas, I understand that sentence also for paid
developments. If a client asks OPENGIS.ch (or any other
company) to add an new QGIS feature, for us it is a commercial
activity. so that formulation is really tricky. </div>
<div dir="auto"><br>
</div>
<div dir="auto">I escalated already to OSGeo.</div>
<div dir="auto"><br>
<div data-smartmail="gmail_signature" dir="auto">Marco
Bernasocchi<br>
<br>
QGIS.org Chair<br>
OSGeo.org Board member<br>
OPENGIS.ch CEO</div>
<br>
<div class="gmail_quote" dir="auto">
<div dir="ltr" class="gmail_attr">On Wed, 19 Jul 2023, 10:32
Andreas Neumann, <<a href="mailto:andreas@qgis.org"
target="_blank" rel="noreferrer" moz-do-not-send="true"
class="moz-txt-link-freetext">andreas@qgis.org</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div>Hi again,</div>
<div><br>
</div>
<div>Here is an excerpt from the proposed regulation
(source <a
href="https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52022PC0454"
rel="noreferrer noreferrer" target="_blank"
moz-do-not-send="true" class="moz-txt-link-freetext">https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52022PC0454</a>
):</div>
<div><br>
</div>
<div><i><b>(10) "
<span>In order not to hamper innovation or
research, free and open-source software
developed or supplied outside the course of a
commercial activity</span><span> should not be
covered by this Regulation</span><span>. This </span><span>is</span><span>
in particular the case for software, including
its source code and modified versions, that is
openly shared and freely accessible, usable,
modifiable and redistributable. </span><span>In
the context of software, a commercial activity
might be characterized not only by charging a
price for a product, but also </span><span>by
charging a price for technical support services</span><span>,
by provi</span><span>di</span><span>ng a
software platform through which the manufacturer
monetises other services, or</span><span> </span><span>by
the use of personal data for reasons other than
exclusively for improving the security,
compatibility or interoperability of the
software.</span>" </b></i><br>
</div>
<div><br>
</div>
<div>So it seems to be primarily an issue for companies
selling "technical support" around Open Source
software - and not so much for the project itself.</div>
<div><br>
</div>
<div>Of course, these companies are very important for
the QGIS and OSGeo ecosystem - and therefore PSC
should make an effort here as well.</div>
<div><br>
</div>
<div>Andreas<br>
</div>
<div><br>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Wed, 19 Jul 2023 at
10:25, Andreas Neumann <<a
href="mailto:andreas@qgis.org" rel="noreferrer
noreferrer" target="_blank" moz-do-not-send="true"
class="moz-txt-link-freetext">andreas@qgis.org</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px
0px 0.8ex;border-left:1px solid
rgb(204,204,204);padding-left:1ex">
<div dir="ltr">
<div>Hi,</div>
<div><br>
</div>
<div>I wasn't aware about it - ideally, our umbrella
organizations (OSGeo, FOSSGIS e.V. or counterparts
in other countries, in Switzerland maybe CH-Open)
could react - and not all of the individual
projects separately.</div>
<div><br>
</div>
<div>Of course, we can do our part to support the
umbrella organization - and maybe the more "user
visible" and popular projects (like QGIS, PostGIS,
GeoServer, MapServer, OpenLayers, etc.) could use
their visibility to support the efforts of the
umbrella organizations - but it should be somehow
coordinated.<br>
</div>
<div><br>
</div>
<div>You, Marco, can discuss this with OSGeo - this
is the link to the "steering committee" of
FOSSGIS: <a
href="https://fossgis.de/verein/vorstand/"
rel="noreferrer noreferrer" target="_blank"
moz-do-not-send="true"
class="moz-txt-link-freetext">https://fossgis.de/verein/vorstand/</a></div>
<div><br>
</div>
<div>Andreas<br>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Wed, 19 Jul
2023 at 10:06, Marco Bernasocchi via QGIS-PSC <<a
href="mailto:qgis-psc@lists.osgeo.org"
rel="noreferrer noreferrer" target="_blank"
moz-do-not-send="true"
class="moz-txt-link-freetext">qgis-psc@lists.osgeo.org</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px
0px 0px 0.8ex;border-left:1px solid
rgb(204,204,204);padding-left:1ex">
<div dir="auto">Hi Vincent,
<div dir="auto">thanks a lot for the link. I had
honestly missed this.</div>
<div dir="auto"><br>
</div>
<div dir="auto">does not look good at all.</div>
<div dir="auto">I ve also shared thid with the
OSGeo board.</div>
<div dir="auto"><br>
</div>
<div dir="auto">and will discuss with the psc
what we can do.</div>
<div dir="auto"><br>
</div>
<div dir="auto">cheers </div>
<div dir="auto"><br>
<div dir="auto">Marco Bernasocchi<br>
<br>
QGIS.org Chair<br>
OSGeo.org Board member<br>
OPENGIS.ch CEO</div>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Wed, 19 Jul
2023, 09:45 Vincent Picavet (ml) via QGIS-PSC,
<<a href="mailto:qgis-psc@lists.osgeo.org"
rel="noreferrer noreferrer" target="_blank"
moz-do-not-send="true"
class="moz-txt-link-freetext">qgis-psc@lists.osgeo.org</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote"
style="margin:0px 0px 0px
0.8ex;border-left:1px solid
rgb(204,204,204);padding-left:1ex">Hi PSC,<br>
<br>
Should you not be aware already, there is an
existential and urgent risk on the OpenSource
ecosystem coming from the European commission,
through the CRA text :<br>
<br>
<a
href="https://eclipse-foundation.blog/2023/02/23/cyber-resilience-act-good-intentions-and-unintended-consequences/"
rel="noreferrer noreferrer noreferrer
noreferrer" target="_blank"
moz-do-not-send="true"
class="moz-txt-link-freetext">https://eclipse-foundation.blog/2023/02/23/cyber-resilience-act-good-intentions-and-unintended-consequences/</a><br>
<br>
Mozilla has already taken action, and publicly
reacted also. So did a few other opensource
organizations.<br>
<br>
Given the strong impact it may have on the
OpenSource world, I think QGIS.org should :<br>
- make a public announcement / blog article /
press release<br>
- directly contact MEPs to communicate about
the problems raised by the current version of
the text<br>
- coordinate with other OpenSource
organization for actions<br>
- optionnaly, make some stronger actions (
e.g. close QGIS downloads as filezilla does,
display a message on the web site, display a
message on QGIS start window...)<br>
<br>
The ITRE commission is supposed to meet today,
this is therefore an urgent matter. The longer
we wait, the more difficult it will be to
reestablish the text to an acceptable version.<br>
<br>
Best regards,<br>
<br>
Vincent<br>
_______________________________________________<br>
QGIS-PSC mailing list<br>
<a href="mailto:QGIS-PSC@lists.osgeo.org"
rel="noreferrer noreferrer noreferrer"
target="_blank" moz-do-not-send="true"
class="moz-txt-link-freetext">QGIS-PSC@lists.osgeo.org</a><br>
<a
href="https://lists.osgeo.org/mailman/listinfo/qgis-psc"
rel="noreferrer noreferrer noreferrer
noreferrer" target="_blank"
moz-do-not-send="true"
class="moz-txt-link-freetext">https://lists.osgeo.org/mailman/listinfo/qgis-psc</a><br>
</blockquote>
</div>
_______________________________________________<br>
QGIS-PSC mailing list<br>
<a href="mailto:QGIS-PSC@lists.osgeo.org"
rel="noreferrer noreferrer" target="_blank"
moz-do-not-send="true"
class="moz-txt-link-freetext">QGIS-PSC@lists.osgeo.org</a><br>
<a
href="https://lists.osgeo.org/mailman/listinfo/qgis-psc"
rel="noreferrer noreferrer noreferrer"
target="_blank" moz-do-not-send="true"
class="moz-txt-link-freetext">https://lists.osgeo.org/mailman/listinfo/qgis-psc</a><br>
</blockquote>
</div>
<br clear="all">
<br>
<span class="gmail_signature_prefix">-- </span><br>
<div dir="ltr" class="gmail_signature">
<div dir="ltr">
<div><br>
--<br>
Andreas Neumann<br>
</div>
<a href="http://QGIS.ORG" rel="noreferrer
noreferrer" target="_blank"
moz-do-not-send="true">QGIS.ORG</a> board member
(treasurer)<br>
</div>
</div>
</blockquote>
</div>
<br clear="all">
<br>
<span class="gmail_signature_prefix">-- </span><br>
<div dir="ltr" class="gmail_signature">
<div dir="ltr">
<div><br>
--<br>
Andreas Neumann<br>
</div>
<a href="http://QGIS.ORG" rel="noreferrer noreferrer"
target="_blank" moz-do-not-send="true">QGIS.ORG</a>
board member (treasurer)<br>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</div>
</body>
</html>