Mailing List Archive

Joining Forces for Open Source Cybersecurity Standards
Will we join these efforts?
https://thephp.foundation/blog/2024/04/02/open-source-community-cra-compliance-initiative/

There's a risk that, say, MediaWiki consultants be inundated by
paperwork in the EU if they suddenly get treated as "manufacturers".
This can probably be avoided with some shared documentation work
(handled by WMF?), as long as the ~40 expected upcoming standards do not
hardcode some FLOSS-hostile methods of doing things.

MediaWiki development and deployment processes tend to be quite
peculiar, so it would be nice to make sure they're covered. (Some work
with Debian may also help, as MediaWiki is packaged there and some
MediaWiki projects are under SPI? Not sure.)

In case you have no idea what it is about:
https://wikimedia.brussels/cyber-resilience-act-its-a-wrap/
https://blog.nlnetlabs.nl/what-i-learned-in-brussels-the-cyber-resilience-act/
https://berthub.eu/articles/posts/eu-cra-what-does-it-mean-for-open-source/

And specifically on standards:
https://fosdem.org/2024/schedule/event/fosdem-2024-3395-cra-40-new-ways-the-cra-can-accidentally-harm-open-source/
https://www.youtube.com/watch?v=jvKvsP6OGKw

Federico
_______________________________________________
Wikitech-l mailing list -- wikitech-l@lists.wikimedia.org
To unsubscribe send an email to wikitech-l-leave@lists.wikimedia.org
https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/