<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
span.EmailStyle19
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:black;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:12.0pt'>Van, your response to my earlier comments about CAL did not capture my objections correctly.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>1. "Performance" is a very misleading word for you to use. First, it is meant by you in an entirely different way than the explicit copyright term-of-art in 17 USC 101:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-size:12.0pt;font-family:"Verdana",sans-serif;color:#333333;background:white'>To “</span><a href="https://www.law.cornell.edu/uscode/text/17/101"><span style='font-size:12.0pt;font-family:"Verdana",sans-serif;color:#337AB7;background:white'>perform</span></a><span style='font-size:12.0pt;font-family:"Verdana",sans-serif;color:#333333;background:white'>” a work means to recite, render, play, dance, or act it, either directly or by means of any</span><a href="https://www.law.cornell.edu/uscode/text/17/101"><span style='font-size:12.0pt;font-family:"Verdana",sans-serif;color:#337AB7;background:white'> device </span></a><span style='font-size:12.0pt;font-family:"Verdana",sans-serif;color:#333333;background:white'>or </span><a href="https://www.law.cornell.edu/uscode/text/17/101"><span style='font-size:12.0pt;font-family:"Verdana",sans-serif;color:#337AB7;background:white'>process</span></a><span style='font-size:12.0pt;font-family:"Verdana",sans-serif;color:#333333;background:white'> or, in the case of a motion picture or other audiovisual work, to show its images in any sequence or to make the sounds accompanying it audible.</span><span style='font-size:12.0pt'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>You risk misleading licensors and licensees about the meaning of that word.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>"Performance" also relates, in your private definition, to an API. But an API doesn't require that anything specific be performed. An API by which one program tells another simply to "wake up" doesn't itself perform anything or require the awakened program to perform anything specific. We should be careful not to misinform the Supreme Court about what the vast majority of the software industry means by an API. It is merely a type of interface or interaction between separate copyrighted programs to allow them to function together. Many of us believe that an API should not be subject to copyright or licensing restrictions at all.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>2. When a person sends data to a program, no license should require that the receiving program be prepared to send it back. Data is and should remain free. The sender alreadyd knows (or should know) what data she sent to the receiver. There is no need to impose any return burden on the receiver of that data.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>More important, my reference in my email to GDPR meant only that the receiver should have a responsibility not to disclose anyone's personal data to any third party. When my phone sends my name and URL and location as data to a receiving program, that automatically (by statute!) should be confidential information. The sender could have copied the data before it was sent, and the receiver should have a confidentiality obligation about that data that forbids her from disclosing it to anyone without my express permission. This has no relationship to "ownership interests or licensing rights." For example, my "location" is not owned; it is merely personal information that I want kept from third parties.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>I hope you won't dismiss my concerns about CAL casually.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'>/Larry<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:.5in'><b>From:</b> License-review <license-review-bounces@lists.opensource.org> <b>On Behalf Of </b>VanL<br><b>Sent:</b> Monday, May 13, 2019 2:03 PM<br><b>To:</b> License submissions for OSI review <license-review@lists.opensource.org><br><b>Subject:</b> Re: [License-review] For Approval: The Cryptographic Autonomy License<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p class=MsoNormal style='margin-left:.5in'>Hello all, <o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>I wanted to stop for a minute and provide a checkpoint: a good faith summary of what I see as the arguments and counterarguments about the CAL. Please correct me if I am misrepresenting anyone's arguments. <o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>As far as I see it, there are two substantive debates occurring over the CAL: <o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'> 1) Can data portability can be guaranteed as part of software freedom/under the OSD?<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'> 2) Is the legal mechanism of using "public performance" effective, compliant with the OSD, and good policy?<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>These issues are fundamental. Regardless of how well (or how poorly) the CAL is drafted, these cannot be resolved through more precise wording or better examples. Other issues of wording, or clarifications about the role of patent rights have been raised, but those seem to have been resolved through explanation or changes to the wording. There is also a third line of argument that the CAL is too complicated, and that complexity <i>per se</i> should be disqualifying. With regard to this third argument regarding complexity, it seems subordinate to the substantive debates above. (For an example, see Perens, ; also in rebuttal, Villa, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004143.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004143.html</a>)<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>The substantive arguments above generally only apply to the "operator" use case, where the software is being run by a first user (the "operator") to provide services to one or more second users (the "end users"). Note that the linked messages below are *representative*, not comprehensive.<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><b>1. Arguments about data portability:</b> The CAL conditions the exercise of copyright and patent permissions on providing data portability for end users of the software in the operator context. This is for "User Data" as defined in the CAL, which is scoped to data that is input to or output from the software in which a user as a preexisting interest.<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Argument: The data portability provisions violate freedom zero. (Perens, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004121.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004121.html</a>)<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Response: Data portability is in line with traditional notions of software freedom (Lindberg, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004123.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004123.html</a>), see also "CAL is a net positive contribution to software freedom" (Ingo, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004148.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004148.html</a>) <o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Argument: It is a use restriction (prohibited under OSD 6) to deny operators the ability to withhold user data from end users because it applies more particularly in the operator case. (Perens, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004081.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004081.html</a>, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004036.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004036.html</a>)<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Response: Operators are free to use the software in any way they see fit - there is nothing in the CAL that denies them the ability to use the software in any particular way. They just have to take the additional action of providing data portability along with source.<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Argument: This encumbers data that is outside the scope of the license. (Perens, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004032.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004032.html</a>)<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Response: The CAL does not create any rights that did not previously exist. It does not change the license for any work or data. (Lindberg, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004033.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004033.html</a>)<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Argument: Data is not copyrightable, so not reachable by the license. (Rosen, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004137.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004137.html</a>)<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Response: The copyrightability or not of data is not relevant to the license; the CAL does not create new ownership interests or licensing rights. (<a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004139.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004139.html</a>)<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Argument (Ingo vs Ingo!): CAL may fail OSD #6, in similar fashion to license zero... "I also agree with Bruce that this whole topic is a can of worms" <o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Response: Having "Freedom to run the program for any purpose" includes both operator and end user as people "running" the program - this is the idea behind all network copyleft.... CAL is scoped "in a way that is quite defensible" <o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>(Both are Ingo, same message: <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004148.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004148.html</a>)<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Argument: Data portability is an ethical restriction which doesn't belong in a license. (Cowan, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004140.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004140.html</a>)<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Response: The CAL limits itself to permissions for the work and does not invoke ethical duties (<a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004108.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004108.html</a>)<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><b>2. Arguments about the legal mechanism:</b> Open source software licenses rely on intellectual property law to enforce their rules concerning the licensing of derived works. Most existing FOSS licenses have used the ability to distribute the work and to create derivative works (both under copyright) as the traditional "hook" for enforcement. Some alternatives do exist: the third party beneficiary language in NASA 1.3, and the "network interaction" with a modified work in AGPL.The CAL also uses distribution and the ability to create derivative works as hooks for copyleft enforcement. The CAL also uses "public performance" (either as included in the copyright statute or as defined in the included definition), as well as patent rights (specifically "use", "sale," and "offer for sale").<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>Most of the arguments have to do with the use of public performance:<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Argument: This is legally untested and not necessary (e.g. Ingo, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004046.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004046.html</a>)<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Response: The only other license applicable in an operator context is the AGPL, which uses legally novel terms, is gameable relative to enforcement, and ambiguous in a corporate context (Lindberg, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004047.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004047.html</a>, see also Fleming, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004049.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004049.html</a>)<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Argument: Public performance is US-centric and may not be applicable in the international context. (Chestek, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004054.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004054.html</a>)<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Response: WIPO "Communication to the public" appears analogous (Atkinson, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004055.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004055.html</a>, see also Ingo, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004060.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004060.html</a>), and "Public performance is also a defined term" (Lindberg, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004108.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004108.html</a>)<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Argument: Public performance extends copyright ("is copyright maximalist") and so should be rejected as a matter of policy. (example: Henrik Ingo, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004059.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004059.html</a>, see also Peterson, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004092.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004092.html</a>). <o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Response: "Public performance is recognized under copyright" and it is better to use existing legal terms (Lindberg, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004095.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004095.html</a>, see also Rosen, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004137.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004137.html</a>, but Rosen mentions that it may be limited in application)<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Argument: The CAL uses Oracle v. Google-based logic regarding API reimplementation, this is premature (Fontana, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004062.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004062.html</a>) <o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'>- Response: These rights already exist, this is not an extension (Lindberg, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004108.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004108.html</a>, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004089.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-May/004089.html</a>). Also, the structure of the CAL does not make it dependent upon a particular outcome in OvG (Chestek, <a href="http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004067.html">http://lists.opensource.org/pipermail/license-review_lists.opensource.org/2019-April/004067.html</a>)<o:p></o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div><div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></body></html>