Jun 19, 2026, 7:37 PMFresh from #bsdcan
What has (can) the EU Cyber Resilience Act done (do) for you?
also at https://bsdly.blogspot.com/2026/06/what-has-can-eu-cyber-resilience-act.html (with trackers)
TL;DR: It's *not* the end of Free and Open Source software (or the world as we know it). It's time to engineer up!
#CRA #cyberresilience #resilience #cybersecurity #eu #freebsd #openbsd #netbsd #engineerup #development #softwareenginering @bsdcan
I generally agree, but with two caveats:
One crucial aspect of "FOSS as we know it", will end: The overnight success.
The way something like Vinyl Cache (the FOSS project formerly known as Varnish Cache) took of, is very unlikely under CRA, because the paper work will hinder and delay the adoptation.
You're not going to wake up one day, and realize that half the worlds passwords are protected by some code you wrote, you will have drowned in "CRA-questionaires" long before that.
Second: There will be a good money to be made on CRA paperwork, both in "FOSS Stewards" and corporations.
It's not obvious to me, that future FOSS talents will be as blasé about money as our generation was or even that there will be a future generation of independent FOSS talents to begin with, or if they will all suffer a painful demise under The Mgt. of the FOSS Steward they work for.
But overall: CRA is a good thing, and FOSS should not ever become a "get out of jail" card.