Open source/Free software projects are global by default (even by definition). Open to everyone. So please stop this nonsense about β€žeuropeanβ€œ Open source that β€žweβ€œ should invest in. Digital sovereignty with open source means global upstream, global cooperation and local implementation. But nationalist open source thinking simply isn’t the software freedom we are fighting for since many years.

1/2

Upstream development in FOSS is inclusive. Downstream use and implementation can be defined/limited by local laws, regulation, project governance and culture, depending on where and how it is used. Using FOSS in companies is different from use by authorities etc. But when you make upstream participation exclusive, you are not doing FOSS. Period. So. No matter how you organise your FOSS organisation, understand and respect this. Upstream = inclusive.

2/2

@jwildeboer Ideally this would be true (maybe downstream wouldn't even have restrictions). But upstream always being inclusive is not, especially during the period when the US was heavily restricting exports of strong cryptography. Strict "inclusivity" would've meant FreeS/WAN's development would quickly become illegal, because accepting contributions from the US would mean violating US export law. Not restricting the acceptance of patches there would most likely mean delaying a free implementation of IPsec for several years

@jwildeboer Yes this! ⬆️

This is something very important. I really dislike it to hear in the context of #DigitalSovereignty mainly speaking about US vs EU, or other regions/countries.

#FOSS is the key to get digital sovereignty. A worldwide community of people and companies working together for public benefit and providing freedom and control to the users (whether an individual or a government, or an educational institution, or anything else).

@jwildeboer Very much true.
Let's not forget about the risks of unbalanced support of open source projects, though. We are all part of our social/political/corporate environment and an unstable environment can pose a risk to an open source project and everything depending on it.
Sometimes all it takes to cripple an unbalanced project is an illness, a new CEO or an election. Unfortunately the world is full of instability at the moment.
@jwildeboer However, one could require 3rd level knowledge within europe. That would make sense - trying to limit contributions and usage is however silly.

@jwildeboer right and also wrong.
In it's core your text is true. But we speak here also about politics. And her Inational thinking is a core feature the moment you wish an invest.

So please do not bother politician's with that. This text is important for all others like developers, project manager, contributors. the peoples should always build there own mind and direct the politicians the way. It should not be the other way around.

@jwildeboer isn't the problem that, open source or not, a digital servive run in a country is subject to that country's laws? If the US (or EU, as they keep trying) outlaw E2EE messengers, the location of where something is run makes a difference. And right now I assume USGov can access anything they want if its run on a US Server, no?

@jwildeboer it is indeed true that the infrastructure allows us to react *lazily* to a compromised upstream i.e. *when* it happens instead of in anticipation of it.

the only preparation it takes really is maintaining international repository mirrors, which i think is already massively the case for everything that matters, since git/hg are innately built that way. svn would be more of a problem.

@jwildeboer so a real secondary concern is losing maintainers. it would matter more, i think, to make sure maintainers of vital projects hosted in, for instance, the US are able to escape before they no longer can't.

@jwildeboer This is not really true given how often some (usually US-based) project decides to move away from open source to some open-sounding-but-not-really model.

Theoretically it's a global commons, in practice there is still control resting with particular groups, and where those groups are based can matter.

A bit like people saying "just fork" etc – yes, OK, but that doesn't make the structures not matter, and the structures are generally not "global" in any real way.

@jwildeboer this is sadly not correct.

OSS projects under a legal umbrella and/or on a hosting platform are bound by the embargoes etc of the jurisdiction in which the umbrella and/or hosting platform reside.

Organizing PromCon, LF/CNCF gave us a whole list of countries we can not sell tickets to. This list felt longer than last time I organized it. A conference under a European umbrella would have a shorter list.

The same is directionally correct for the actual source code.

@RichiH @jwildeboer in addition to that, I often see the expression "european open source that" used to mean that a significant part of the developer base is/should be located in EU (professional or not is irrelevant here). And investing in that is a perfectly worthwhile strategic goal for the EU.

@zacchiro @jwildeboer in addition to this, it can also be an argument in favor of seeding and creating local knowledge. Creating and having clusters of high quality skills is a long term plus.

To stay in the Red Hat analogy, I am certain that the Brno region will benefit from knowledge, startups, better staff, etc which moved to the area or received better education there as a direct and indirect effect of Red Hat's office location choice for a very long time.

@jwildeboer unfortunately this has already been proven false with the Linux Foundation/Project removing Russian maintainers due to US sanctions.

The code is global, but the structures and people that empower that code must exist somewhere, and you shouldnt ignore that entire part of the argument

@jwildeboer

Very good point! Working on various open source projects like @misp, which received funding through different EU programs, highlights the importance of supporting global open source projects that are open to all fields of use and countries. Embracing existing open source projects is the best model to ensure sustainability and growth.