The European Cyber Resilience Act

Posted Sep 20, 2023 12:31 UTC (Wed) by pizza (subscriber, #46)
In reply to: The European Cyber Resilience Act by mrybczyn
Parent article: The European Cyber Resilience Act

> Adding such a restriction to a GPLed project looks problematic, at least.

I don't see why; Nothing forces the software author to make the softare available to everyone in the world. If the author blocks EU IP addresses from their download side, that's not a GPL restriction.

Now if someone _else_ distributes the software within the EU -- say, Debian, will Debian face liability?

(FWIW, I have a really hard time seeing how any major Linux distribution could continue to exist under the CRA. Or should only RHEL or SLES face liability because those are commercial products, but CentOS/Fedora or OpenSUSE/Tumbleweed not be, as they're provided Gratis, As-Is?)