Important security notice for Domibus users
To improve the security posture of Domibus deployments, secure deployment recommendations for Domibus were recently published. These recommendations can and should be complemented by further site-specific measures, but they already provide a good checklist for any installation.
Users are invited to assess their deployments against these recommendations and take measures to align with them at their earliest of convenience.
An important policy change, affecting all Domibus users, will be applicable approximately three months after the publication of this notice:
Key update effective 1st May 2024
From 1 May 2024, the eDelivery Building Block will modify its approach to releasing security patches for Domibus. Emergency security patches will only be released for vulnerabilities impacting installations that adhere to the Domibus Secure Deployment Recommendations. It is crucial to understand that vulnerabilities exploitable only in non-compliant deployments will be addressed with less urgency.
The update is part of eDelivery's ongoing efforts to enhance the security of Domibus installations and improve the efficiency of the emergency release process. We strongly advise all users to align their deployments with the Domibus Secure Deployment Recommendations by 1 May 2024.
The eDelivery Building Block
eDelivery is a Building Block that provides technical specifications and standards, installable software and ancillary services to allow projects to create a network of nodes for secure digital data exchange.
Domibus is the sample software provided by the European Commission to implement an eDelivery AS4 Access Point for the interoperable, secure and reliable data exchange. It is based on the eDelivery AS4 profile, an open technical specification for the secure, web-based, payload-agnostic exchange of data or documents.
Stay tuned for the latest updates on eDelivery services by checking the Building Block's X and web page. For more information, do not hesitate to register for personalised news. You can contact us via our portal (EU Login required) or by e-mail: EC-EDELIVERY-SUPPORT@ec.europa.eu.
Update your bookmarks: new links now live
What's new?
We have recently changed the links leading to the websites of eDelivery, OOTS, eID, eSignature, eInvoicing, and EBSI, as well as the links leading to some of their communities. Specifically, we have changed the part of the URL that says "WIKIS" to "SITES". For example, we have changed :
- https://ec.europa.eu/digital-building-blocks/wikis/display/... to
- https://ec.europa.eu/digital-building-blocks/sites/display/...
Automatic redirections from our old to the new URLs are in place to make sure you can continue to access all pages. Nevertheless, we invite you to bookmark the new URLs for a seamless experience.
What does this mean for you?
This means it is time to update your bookmarks. We understand that this might be a bit inconvenient, and we apologise for any confusion this may cause. Please note that we will not be using the old links anymore, so it is important to make the switch.
New links
Site | New URL |
Digital website | |
EBSI website | |
Once-Only Hub | |
eDelivery Homepage | https://ec.europa.eu/digital-building-blocks/sites/display/DIGITAL/eDelivery |
eID Homepage | https://ec.europa.eu/digital-building-blocks/sites/display/DIGITAL/eID |
eSignature Homepage | https://ec.europa.eu/digital-building-blocks/sites/display/DIGITAL/eSignature |
eInvoicing Homepage | https://ec.europa.eu/digital-building-blocks/sites/display/DIGITAL/eInvoicing |
eDelivery User Community | https://ec.europa.eu/digital-building-blocks/sites/display/EDELCOMMUNITY/eDelivery+User+Community |
eSignature TLSO Community | https://ec.europa.eu/digital-building-blocks/sites/display/TLSO/TLSO+Community |
eInvoicing User Community | https://ec.europa.eu/digital-building-blocks/sites/display/EINVCOMMUNITY/eInvoicing+User+Community |
We are here for you
In case you are having issues with accessing a page or finding the correct URL, please open a ticket through the Digital Help Desk and we will be happy to assist you.
Adoption timeline for eDelivery 2.0 profiles
Update 1 March 2024: added reference to BDXL and ebCore Party Id specifications.
Following the first consultation period of the eDelivery AS4 and SMP 2.0 profiles in 2023, the eDelivery team published the disposition of public review comments and updated eDelivery AS4, SMP, BDXL and ebCore Party Id 2.0 specifications. We extend our gratitude to everyone who participated in the public consultation, as your feedback is crucial in shaping standards that meet the diverse needs of all eDelivery users.
Anticipating the release of the second draft of the 2.0 specifications, a new public consultation will be open soon. We encourage all stakeholders to stay tuned for updates on the publication of the consultation, as your participation remains vital in refining these specifications. The updated specifications will then be tested during an interoperability event in June to check their readiness for final publication, tentatively in the second half of 2024, or to identify and to address implementation issues.
Next steps
Throughout the year, the eDelivery team will support the implementation of the updated profiles by engaging with users during events for testing and answering any questions that might occur along the way. A test plan, scheduled for publication by April 2024, will outline the details of the interoperability tests (configuration parameters, test cases and more) in order for interested participants to be able to prepare their proof of concept implementations for the interoperability event. This engagement concerns all software creators and service providers that implement the eDelivery specifications.
Call for action – eDelivery solution providers
One central part of ensuring the real-world viability of the updated profiles will be the eDelivery Interoperability Event, which will take place on 11 June, bringing together software creators and service providers that implement the eDelivery specifications. The event will be an opportunity for participants to test their (proof of concept) implementation of the message exchange in the AS4 profile version 2.0 using the new cryptography. We invite you to:
- Start preparing your solutions as of February onwards, as soon as we publish our new draft specifications.
- Sign up to our mailing list here, making sure to check the box "Notifications about planned changes of eDelivery specifications and related public consultations", in order to be notified in April about the test plan that will be followed during the interoperability event.
- Express your interest to join our interoperability event in June by writing to us at EC-DIGITAL-BUILDING-BLOCKS@ec.europa.eu.
Call for action – EC colleagues operating or preparing eDelivery-based ecosystems
Help us help you! We recognise the importance of a smooth transition of your ecosystems to the new eDelivery specifications in the following years. To help us engage the widest possible audience of eDelivery solution providers during this preparatory phase, and especially the ones your community depends on, please spread the word! Share this article in your communities (Member State administrations, economic operators, etc.) and invite them to get in touch with the providers of the eDelivery solutions they are using to share this call for action.
2024 Interoperability Forum meetings – what to expect
The initial response to the public consultation on eDelivery AS4 and SMP 2.0 profiles was discussed at the eDelivery Interoperability Forum meeting on 28 November 2023.
The Interoperability Forum on 29 February gave stakeholders the opportunity to delve into the disposition of public review comments and hear in detail about the updated profiles, ahead of the public consultation. We are content with the continued collaboration with our stakeholders in this ongoing process.
Amongst other topics, the following Forum meeting on 18 April will give the opportunity to discuss the details of the interoperability event.
The Interoperability Forum brings together software creators and service providers that implement the eDelivery specifications. If you think the community is relevant for you and your work please don't hesitate to sign up to become a member of the Interoperability Forum.
We appreciate your continued collaboration and look forward to collectively advancing eDelivery standards for a more interconnected and secure exchange of data.
Stay tuned for the latest updates on eDelivery services by checking the Building Block's X and web page. For more information, do not hesitate to register for personalised news or contact us via our portal or by e-mail: EC-EDELIVERY-SUPPORT@ec.europa.eu.
The eDelivery Building Block
eDelivery is a building block that provides technical specifications and standards, installable software and ancillary services to allow projects to create a network of nodes for secure digital data exchange.