<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'>What Dan Wallach says about open source licensing below is correct, although I don't blame the problem on lawyers for MIT, Apache, or even Android. :-) <o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'>As long as software for voting and election is available to everyone under an OSI-approved FOSS license, we should be comfortable with that. <o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-family:"Calibri",sans-serif'>ANY</span></b><span style='font-family:"Calibri",sans-serif'> OSI-approved FOSS license! Recommending a specific open source license at this stage is kind of foolish. It depends a lot on the preferences of the developers and their customers, and on the characteristics of the software itself. <o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'>But for CAVO, the license must be open source and thus on the OSI-approved list. The OSET Foundation license (OPL) has never been submitted for OSI approval. We can't use it.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'>The reason I recommended the GPLv3 license for CAVO is because that license is enthusiastically supported by many people around the world. They "trust" the GPL license to create secure software. They are confident that such software will "remain always" free. But that isn't the only license for free software. And it isn't the only OSI-approved license that people trust.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'>/Larry<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'>Lawrence Rosen<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Calibri",sans-serif'>"If this were legal advice it would have been accompanied by a bill."<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:.5in'><b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'> Brent Turner [mailto:turnerbrentm@gmail.com] <br><b>Sent:</b> Friday, May 29, 2015 9:11 AM<br><b>To:</b> Dan Wallach; Brian Fox; Lawrence Rosen; Tim Mayer; CAVO<br><b>Cc:</b> Bryce Eakin (bryce.eakin@gmail.com); Ronald Morgan; Michael Winn; Michelle Parker; Jan Soifer (jsoifer@oconnellsoifer.com); Dana Debeauvoir<br><b>Subject:</b> Re: [CAVO] STAR Vote<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p><div><p class=MsoNormal style='margin-left:.5in'>Checking in on any updates here- <o:p></o:p></p><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>Best-<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>Brent <o:p></o:p></p></div></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p><div><p class=MsoNormal style='margin-left:.5in'>On Thu, Apr 30, 2015 at 12:26 PM, Dan Wallach <<a href="mailto:dwallach@cs.rice.edu" target="_blank">dwallach@cs.rice.edu</a>> wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><div><p class=MsoNormal style='margin-left:.5in'>I can't speak on behalf of Travis County, but I can explain why we're talking about "suitable open source license" rather than picking a specific one. In short, because lawyers. That's why MIT did their own. That's why Apache did their own. Ditto for Android. It's too early in the game to write down specific legal language. Instead, what matters is that we talk about our intent.<o:p></o:p></p><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>The idea behind pointing specifically to the vote verification machinery as distinct from the rest of the voting machine is that we haven't nailed down the business specifics yet. That depends, in no small part, on who's paying for it. However, it's essential to the security model that independent third parties have the data and tools necessary to verify the cryptographic aspects of the election, and the best way to make that happen is to develop code that's easy to give away. (Again, under a "suitable" open source license.) The intent is that the Democrats, the Republicans, the newspapers, the League of Women Voters, etc., can take the reference code and build their own bespoke web services or whatever else. <o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>Thanks,<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>Dan<o:p></o:p></p></div></div></blockquote></div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div></div></body></html>