13 Mar 2026 00:00:00 +0100

Once again Alexander Sander and Bonnie Mehring sat down for our monthly Software Freedom Podcast episode! The Cyber Resilience Act (CRA) keeps us busy and there are still a lot of uncertainties around it. Take a break and listen to our latest Policy and EU episode of the Software Freedom Podcast.Support FSFE: https://my.fsfe.org/support

SFP#48: Policy and EU: From open questions and attestation, how the CRA is moving forward!

Once again Alexander Sander and Bonnie Mehring sat down for our monthly Software Freedom Podcast episode! The Cyber Resilience Act (CRA) keeps us busy and there are still a lot of uncertainties around it. Take a break and listen to our latest Policy and EU episode of the Software Freedom Podcast.

Alex and Bonnie talk about the most pressuring questions from the community in regard to the requirements by the CRA. During FOSDEM a Q&A session was organised in the Legal and Policy DevRoom. At this session a lot of questions were pointed towards the role of the stewards and manufactures and what the CRA requires of them and what it does not. Together, Alex and Bonnie shed some light on the roles of Free Software developers and about the options the CRA has in stock for single developers. Followed by an outlook on what will come next in the CRA with the upcoming delegated act on Article 25, with option of attestation.

If you are a Free Software developer this is the perfect episode for you to find out what options you have and what lies ahead of you.

The FSFE's policy work is an important part of our aim to safeguard Software Freedom. You can support our work by donating today!

Show notes

Support our work for Free Software

Addressing your questions about the Cyber Resilience Act

Draft Commission guidance on the Cyber Resilience Act

CRA – Role of Free Software and Q&A @ FOSDEM

CRA in practice dev room @ FOSDEM

Could Compliance Costs Sustain FOSS? A Theory of Voluntary Attestations @FOSDEM

Implementing the Cyber Resilience Act - engaging with open source @FOSDEM

Cyber Resilience Act: Reception (Wikipedia)

Cyber Resilience Act, Art. 25, "Security attestation of free and open-source software"

Stay up-to-date and join our Newsletter

We are happy to receive your feedback on the Software Freedom Podcast and especially on the transcript of the episode. Please, email us to: podcast@fsfe.org. If you liked this episode and want to support our continuous work for software freedom, please help us with a donation.

Support FSFE