<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div style="font-family: Calibri, sans-serif; font-size: 14px;">Larry,</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">Interesting article, and timely since I am in the process of determining if GPL V3 is the proper license to recommend for some work we are doing. </div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">I’m not certain that I would agree that GPL V3 is the right license to advocate for CAVO given that the original copyright holder retains immense competitive advantage. It can provide proprietary
extensions and no one else can without a commercial license it is not obligated to provide. If the project is managed so that modifications to the official code base must go through a CLA that provides the original company world-wide non-exclusive perpetual
right to use, copy, modify, etc then GPL V3 is no more protective than Apache from the original copyright holder. If the proprietary extensions from that company are compelling then vendor lock-in remains. Especially if their version is the most advanced
and active.</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">To make this work CAVO members would have to require that all election solutions have no proprietary extensions from anyone. In which case the strong copyleft nature of a license is irrelevant.</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">An MPL derived license like OPL (if it really is MPL derived, I did not look closely at it) all companies are on a more equal footing and you retain the benefits of a common open source core platform
for electronic voting software while permitting all companies the opportunity to provide some competitive advantages to the customer.</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">In our case the majority of the software being evaluated for open sourcing is framework and utility functions that we believe would provide value to our community. We wish to insure that this
framework remains open source and commonly used but that all entities involved (including us) are free to make proprietary plugins to extend the functionality. Whether GPL V3 with a plugin exception or LGPL or MPL is the right answer remains to be seen. </div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">I have the same goals from the perspective of valuing broad adoption while minimizing the risk of “being forked wholesale and appropriated into proprietary systems”. It appears to me that OPL
would fit in the same category as NOSA and EPL v2 if it’s a MPL derivative with special clauses for government procurement. Maybe there is something sinister hidden in there but conceptually it seems reasonable. Especially if it retains the MPL 2.0 compatibility
clauses.</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">I’m curious, do you know why they haven’t submitted it for approval?</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">Regards,</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">Nigel</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<span id="OLK_SRC_BODY_SECTION" style="font-family: Calibri, sans-serif; font-size: 14px;">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Lawrence Rosen <<a href="mailto:lrosen@rosenlaw.com">lrosen@rosenlaw.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>"<a href="mailto:lrosen@rosenlaw.com">lrosen@rosenlaw.com</a>" <<a href="mailto:lrosen@rosenlaw.com">lrosen@rosenlaw.com</a>>, License Discuss <<a href="mailto:license-discuss@opensource.org">license-discuss@opensource.org</a>><br>
<span style="font-weight:bold">Date: </span>Friday, November 14, 2014 at 11:06 AM<br>
<span style="font-weight:bold">To: </span>License Discuss <<a href="mailto:license-discuss@opensource.org">license-discuss@opensource.org</a>><br>
<span style="font-weight:bold">Subject: </span>[License-discuss] Why CAVO Recommends GPLv3<br>
</div>
<div><br>
</div>
<div xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:black;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:326442179;
mso-list-type:hybrid;
mso-list-template-ids:1428093938 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">To: License-Discuss@ [This email is CC-BY.]<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">The California Association of Voting Officials (CAVO) asked me to help them evaluate FOSS licenses for election software. Below is my article for the CAVO newsletter.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">You can read the entire CAVO newsletter at
<a href="http://www.cavo-us.org/Newsletter/newsletter1.html">http://www.cavo-us.org/Newsletter/newsletter1.html</a>. Please direct any comments or questions or support to
</span><span style="font-size:12.0pt;color:#505050;background:white"><a href="mailto:cavocontact@gmail.com">cavocontact@gmail.com</a>.
</span><span style="font-size:12.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">/Larry<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">**************************<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">"Why CAVO Recommends GPLv3" by Lawrence Rosen<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">There are many ways to distribute software. Valuable software nowadays is usually distributed under a free and open source license ("FOSS" license, in short), both because it is usually "free of
cost" software but also "free of restrictions" on copying, making changes, and redistributing that software.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">There are various open source licenses to choose from. They are listed at the
<a href="http://www.opensource.org">www.opensource.org</a> website. Unless a license is listed at that website, most developers and potential customers won't call it FOSS software. The OSET Foundation Public License ("OPL"), a license recently proposed for
an election software project, <b><i>is not a FOSS license</i></b>. [1] <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">FOSS licenses offer several distinct ways to give software away.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">Choosing among those licenses for software is not an arbitrary game of darts. For open source election software that can be trusted and always free, the choice of license is particularly important.
That is why CAVO recommends the General Public License version 3.0 ("GPLv3") as the best license to use. This article gives several important reasons why.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo1"><!--[if !supportLists]--><span style="font-size: 12pt; color: black;"><span style="mso-list:Ignore">·<span style="font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span></span><!--[endif]--><span style="font-size:12.0pt;color:black">Among the many FOSS licenses, GPLv3 is the
<b><i>most modern, widely accepted, and best understood license</i></b> available today. Its predecessor license, GPLv2, is historically far and away the most used worldwide; GPLv3 is replacing it in the rate of license adoption for new FOSS software.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo1"><!--[if !supportLists]--><span style="font-size: 12pt; color: black;"><span style="mso-list:Ignore">·<span style="font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span></span><!--[endif]--><span style="font-size:12.0pt;color:black">GPLv3 is a
<b><i>reciprocal</i></b> license. Once a project or distributor releases election software under the GPLv3, it will remain FOSS software
<b><i>in perpetuity</i></b> under the GPLv3 license. Modifications to that FOSS software will also be distributed
<b><i>in perpetuity</i></b> under the GPLv3. This guarantees that our election software won't ever be taken under commercial covers and turned into proprietary software with unacceptable lock-in and source code restrictions that make voting untrustworthy.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo1"><!--[if !supportLists]--><span style="font-size: 12pt; color: black;"><span style="mso-list:Ignore">·<span style="font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span></span><!--[endif]--><span style="font-size:12.0pt;color:black">The GPLv3 license promotes
<b><i>open and shared development efforts</i></b>. While it is possible to create excellent open source software under more permissive FOSS licenses, those licenses allow commercial fragmentation of the software. That isn't appropriate for widely used election
software. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo1"><!--[if !supportLists]--><span style="font-size: 12pt; color: black;"><span style="mso-list:Ignore">·<span style="font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span></span><!--[endif]--><span style="font-size:12.0pt;color:black">The GPLv3 encourages
<b><i>trustworthy software</i></b>. There is a law of software development named in honor of Linus Torvalds stating that "given enough eyeballs, all <a href="http://en.wikipedia.org/wiki/Software_bug" title="Software bug"><span style="color:black;text-decoration:none">bugs</span></a> are
shallow"; or more formally: "Given a large enough <a href="http://en.wikipedia.org/wiki/Beta_test" title="Beta test"><span style="color:black;text-decoration:none">beta-tester</span></a> and co-<a href="http://en.wikipedia.org/wiki/Programmer" title="Programmer"><span style="color:black;text-decoration:none">developer</span></a> base,
almost every problem will be characterized quickly and the fix will be obvious to someone." [2] GPLv3 software projects invite eyeballs on all distributed versions of the software to identify bugs and security issues; other licenses don't always do that.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo1"><!--[if !supportLists]--><span style="font-size: 12pt; color: black;"><span style="mso-list:Ignore">·<span style="font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span></span><!--[endif]--><span style="font-size:12.0pt;color:black">Although GPLv3 will specifically encourage FOSS development practices for the election code base and its derivative works, that GPLv3 license is nevertheless
<b><i>compatible with successful commercial software and support business</i></b> as well. One need only refer to the robust Linux ecosystem and its contribution to diverse commercial technology worldwide, whose basic software is entirely under the GPLv2 and
GPLv3 licenses. The GPL licenses made that possible.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo1"><!--[if !supportLists]--><span style="font-size: 12pt; color: black;"><span style="mso-list:Ignore">·<span style="font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span></span><!--[endif]--><span style="font-size:12.0pt;color:black">GPLv3 will encourage
<b><i>innovation</i></b> because GPLv3 source code is open to view and change. <o:p>
</o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">For these reasons, CAVO recommends that election software be distributed under GPLv3. This will inevitably create a diverse, worldwide, and enthusiastic community of software developers to create
election systems we can all trust.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">Footnotes:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">[1] The OSET Foundation claim on their website that their license is "an open source software license" is simply untrue. They can try to make it so by submitting their license to
<a href="http://www.opensource.org">www.opensource.org</a> and following OSI's published license review process. While I am merely an observer nowadays of that license review and approval process, as former general counsel for OSI I am confident that certain
provisions in that license make it incompatible with the GPLv3 despite the assertion on OSET's own website that it is.
<a href="http://static.squarespace.com/static/528d46a2e4b059766439fa8b/t/53558db1e4b0191d0dc6912c/1398115761233/OPL_FAQ_Apr14.pdf">
http://static.squarespace.com/static/528d46a2e4b059766439fa8b/t/53558db1e4b0191d0dc6912c/1398115761233/OPL_FAQ_Apr14.pdf</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">[2] <a href="http://en.wikipedia.org/wiki/Linus's_Law">
http://en.wikipedia.org/wiki/Linus's_Law</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">Lawrence Rosen<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:black">Rosenlaw & Einschlag (<a href="http://www.rosenlaw.com/">www.rosenlaw.com</a>)
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:black">(C) 2014 Lawrence Rosen. Licensed under
<a href="https://creativecommons.org/licenses/by/4.0/">CC-BY 4.0</a>. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</span>
</body>
</html>