From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id E22CF138334 for ; Thu, 27 Sep 2018 13:52:12 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id DEAE9E0975; Thu, 27 Sep 2018 13:52:11 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 9AD48E0973 for ; Thu, 27 Sep 2018 13:52:11 +0000 (UTC) Received: from [192.168.10.30] (ool-4571a16e.dyn.optonline.net [69.113.161.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: np-hardass) by smtp.gentoo.org (Postfix) with ESMTPSA id 3BE0D335C8F for ; Thu, 27 Sep 2018 13:52:10 +0000 (UTC) To: gentoo-project@lists.gentoo.org References: <23325.35685.793702.267278@a1i15.kph.uni-mainz.de> <23337.15822.698153.812236@a1i15.kph.uni-mainz.de> From: NP-Hardass Openpgp: id=862040BE422755F27FDE13D5671C52F118F89C67; url=https://sks-keyservers.net/pks/lookup?op=get&search=0x671C52F118F89C67 Autocrypt: addr=NP-Hardass@gentoo.org; prefer-encrypt=mutual; keydata= xsFNBFTkWCYBEADjDSP3/MDba3hDgUjy/8w2PU/kzx+AWwWkXuA3zUhBnS7AVK2Zh5gajysZ OWAkmZ0VmrzSHICQzYosyhq+YVIdTg5LvIxsG1fj2rSEMbqk9mtjdNDsoUmzUkECOL/Txph1 u46vtnMy97Gs82imE3uCBIQkxc+aUesePXeQGOh6EDcxMvFcn8x1lhXE244lES5Spu72Wen4 cYRpPboRTbuUxXUwrOIAOzF2eX5BDipZVKmrV9i5SC3oQIG1MnJdHDLWhDm3XQjlEsvH5Rge 55bvXFVs6Hzdv3SUI330E6W15kLt0Ij94nJqOgWCPfKu+7Tb2UYlVlCkiIFujIWxLGaQRXU2 3wOu7TuGJ0NQzP1lwCImdydEF+BL61l6awFI1ixwgZQGkzaEvXMhc6PltM12y5poFvcQXK+P aLdztY0cLSlhg36HZb+E8bavNLLIw4tJ2LKx8YmMNFfoIVAN33wU2QZ08SyT5VTCi8svU0U+ 2n8e3TA23gx+OHyUvjwNdFm5NDi0sIpeYpgMfUSjTO7pq0JEAQLTY//9MjqmmicXpvMnqA2X NrZZXaxs19yApzxfbFQegg9tgNiSeYONtIXWQinznfv+h3GY7K6zKhyq5IL0ji/Gf2l/+1WD VB/h6OJGbKqydPZnBiQRC6mt/lpkE5/Z1qHzzrNlTT0RTdNDlQARAQABzSJOUC1IYXJkYXNz IDxOUC1IYXJkYXNzQGdlbnRvby5vcmc+wsGWBBMBCABAAhsDBwsJCAcDAgEGFQgCCQoLBBYC AwECHgECF4AWIQSGIEC+QidV8n/eE9VnHFLxGPicZwUCWi8lgwUJCQ00XQAKCRBnHFLxGPic Z7toD/9BlYZ9Lk7ejlvkenz+EPqySkZAHERwUS5hqBiOTarVJZtjm7uGCbzhCltInsWKHREN jIboWsCzHPdnqeQ7BiRjUCbLXctqsW9kWvxBxJaCKqy9XqG7WWqgm7gxqYxDp9EM4mV1JeU4 aSXkLJu/JlLaC0FWvQNFJZhhK7VQwcMmz1mmFZayXFce/lpKn2NWwqQc6gKRQlBvKaY+ohpP 0Ixt7SiU2FqgsfR8tsGxiMaZnq4ULbfzOtee3zSzIaPpF1EzoKmnNKzVdSW7QY94OJQKkFmt KWi0+yk2lYfMVPiYC+Ph8FXe0Cqk//nECA+OGtvLo5bc7mtgCdCqfQVo7ds0HQ9gdW8Hq55u evrVN+6TwoPr0n50wckJ3cQy9Yj1gKWJO/XNciLJoZ2fJ9jAsaP9LlITKeLI1yWqt2LaNMfP gVn4eS/jNstuMvyA0qgmELQ/VItDrC30ow7I8yarPlBpywIW8jpBZQeujujshDfmYJJatt72 ETT6Us5f/zDpb7V8g+feReUzo1bDsIlXxhSC/hrJIQUdsRj5kM2cHgMttdj5/+9mMhxLVXkK AlgJs2evnp3WmrOovYoLfN/pkVyxAbXKu0Y/c7L+NMPRHW+V3oUXGrphw+Uh/S+d3NHG3gGz 1Y0H6OyHHai9f8iXu4aTqhVatNZFmYlywlS3/Wz/Lc7BTQRU5FgmARAA4ThPsCyVb6QBhtRU 5vUuWMuzhXpdUr151ccXYqYBXn1h45hW9qoZo8Y7xQp6cGJSECSNmTkJU9FMN48Ewn3+YIxa uJOWar+eCvh++TvPVqjo/UQZqTK29NUBiL5aSC0pU49Z5Ve2TXYGhdcZT0OQM4A1MTlRfIaV tqlPfoqifsNGjiwpjRoo4AWYADIfhajvHCDJ5ITka+T07DBFOBSy98SaoKNfdaClb6tmLBs7 hroKpCCijfBe20UMeaKN6zQuhW8GR3VzpRC/G9HBEmH6GxiVmBkhEQjgX5aTS7T/jz2YZrI6 mS3zKZ7gEByjhxUOS83UON99aOqnMPUphXnjIPIPydBHYVlY4egLKPI91nFAZv5DYIzyERux KE2w2f9Xns7wyEOYhqddOTZ0lio4oQCc/sR040rKtL6qOciC1z3jDeYTrQE410eGF71SvuiN ceThbAty26zYQAFxvlimrgTTVkLOSsCz6+/SWoD42gwVYwQ4hRoCwYzuC/ILGmECoiJXFgtR A/gK/5g7c05depLSo9VH8/+b4Cxqt+U9+beqfxtr+9b5w9ut6AZcZLj25s40gc19nJQkEl49 S2XfJ7lkczuBj2K8T0ZZ82woPDu2W3UORYU0iW+0WuEZ5DIZsOy5g8YWYFoeWfzI9TPkHAAd ccZtE8r1h2IoQ7RBSr0AEQEAAcLBfAQYAQIAJgIbDBYhBIYgQL5CJ1Xyf94T1WccUvEY+Jxn BQJaLyVzBQkJDTRNAAoJEGccUvEY+Jxnf8YP+wQlCLyFetSuMHd3ZO36HE1ohU+Mvspa6Z1a 97K1ECG9xDNNodHtQ7j1qCTYqKH2N2RWgErowk9RT8y8ok+1fJHD/94qYpmb++R1g2m1XmEC tssGv40uHI0TxVdwu3xpfdGTW8roQOMngoTP0RW5BNWTqfAv7+LEMbD9kber1AbyLJzxYdgU sxwHnQ6pRdcyb75drG9Mo1br8s6knTvW2i+5JCKSud/oexvSC0w2SegPvlsrqPWJoWQ5Yo7g IAQQG6KjdYoVy3m/goNcXiIHnuFv5dWfnOyP+Th2sVgy2VX3M9jsejFvXABYwVyslkIXFudm UqofjSD7OAz9jMOrAgMKdI6ez40GJaK9/aCEynm1ckwzEBpjB9H3TtXuhxwsFB/HqIMxYRCw 7vrKh7of3kzc6nsmn07Nd8sPElx/4wTc6QXyM4OXqmIE5tSgKYt3ns2o6PALqBpWx8FaHafg 4zFRY3+tEx0/lw8/yYDYiRRFfqkuiaqItL6ugSfUXdB13um+606IexFZCiwla1CtnGUx3Byw NQnAYOdUKHkKeQ9mYXGnScl6P6OJBXV5xBmINNmzaRGQWQAXN1/f3AJ7ZLqWdzOT96yKR1RY Qtfcn5WlfuZfjQBVNEWzzTZb/8hAlrFJLMwPUDl9AWz+surEACrh46BT4W2voigsA7dibW6E Subject: Re: [gentoo-project] [RFC] GLEP 76: Copyright Policy [v4] Message-ID: <4683a4e7-c752-8735-4bcf-1ee7cb4837f9@gentoo.org> Date: Thu, 27 Sep 2018 09:52:06 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Project discussion list X-BeenThere: gentoo-project@lists.gentoo.org Reply-To: gentoo-project@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="PnQ2OJBXVQycHOgLOdUQlMzRC2ExkRaqa" X-Archives-Salt: 3f9234d9-52b5-4b9a-a8da-93b7eea9d26d X-Archives-Hash: e95f12a97705c1a0b215ff9524e17bf1 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --PnQ2OJBXVQycHOgLOdUQlMzRC2ExkRaqa Content-Type: multipart/mixed; boundary="7XpLYqcXVDoV9IubXdISFl3j9aXtioQk5"; protected-headers="v1" From: NP-Hardass To: gentoo-project@lists.gentoo.org Message-ID: <4683a4e7-c752-8735-4bcf-1ee7cb4837f9@gentoo.org> Subject: Re: [gentoo-project] [RFC] GLEP 76: Copyright Policy [v4] References: <23325.35685.793702.267278@a1i15.kph.uni-mainz.de> <23337.15822.698153.812236@a1i15.kph.uni-mainz.de> In-Reply-To: --7XpLYqcXVDoV9IubXdISFl3j9aXtioQk5 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 09/27/2018 08:42 AM, Rich Freeman wrote: > On Thu, Sep 27, 2018 at 8:00 AM NP-Hardass wrot= e: >> >> On 09/26/2018 03:25 PM, Ulrich Mueller wrote: >>> Here is another small update of the copyright GLEP, resulting from a >>> recent discussion on IRC. This is not a change of policy, but merely >>> a clarification of the real name requirement: >>> >>> - The Signed-off-by line must contain the name of a natural person. >>> >>> - A copyright holder can be a legal entity (e.g., a company) in some >>> jurisdictions. >>> >> >> IANAL, but as per the Berne Convention, anonymous and pseudonymous wor= ks >> are granted copyright protection. What's the rationale behind mandati= ng >> a real name? >=20 > The DCO/GCO have nothing to do with obtaining copyright protection. > This is always present if not waived. >=20 > It is about showing due diligence in the event somebody claims that > somebody ripped off their work and contributed it to Gentoo without > authorization. >=20 > If your real name is attached to a statement saying that you didn't > steal the work, and you did steal the work, then they can go after you > as well as Gentoo. That deters contributing stuff without checking on > its legality. That same deterrence also helps show good faith on > Gentoo's part. This is why organizations generally pursue these > policies. >=20 > If somebody violates a copyright anonymously, then they have no skin > in the game. They can just disappear if anything bad happens. If a > contributor isn't willing to stake their own money and reputation on > the statement that something is legal to contribute, then why should > Gentoo assume that they've put a lot of effort into the accuracy of > that statement? >=20 And, AFAICT, this only applies to the Signed-off-by line (the committer). The author may be anonymous or pseudonymous... So, your statement is that people making commits to Gentoo must have real names... and be public. This doesn't have any impact on whether the source of the code is legit, just gives you a point of blame for who actually committed it (which, TBH, doesn't mean much). I can say John Doe committed code that wasn't legal. But i_steal_code_1337 authored it... I guess we know not to accept code from him... or do we... since we have no way of vetting authors. Making the restriction of names for committers and not authors, IMO, has no weight. Requiring that all contributions be from real named sources is a pretty drastic change, and not what is being proposed, TTBOMK. But that's really besides the point... The current status quo (as is the case with me) is that a committer may be pseudonymous under the condition that the Foundation have that individual's name in the event of a copyright issue. So, I still don't understand how forcing everyone to publicly use a real name achieves something that we aren't currently achieving... Is that incorrect? --=20 NP-Hardass --7XpLYqcXVDoV9IubXdISFl3j9aXtioQk5-- --PnQ2OJBXVQycHOgLOdUQlMzRC2ExkRaqa Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEv526yLNI+t7RHfJZHNlBHbKvGPsFAlus4IYACgkQHNlBHbKv GPsdkxAApUVro5uVZ8Vs9XOgmglfJdY2MqBOUYOz5uW9nDNekU15++Kpy9sGG8QW wxtYpsbYrrXbdmQNQPuw4FkdLtHeHi2TgWrwrSqGsnKKBj5hF9LRcEB9gj0PVj6J S/rUWn4+01LFwfLeHxPCQPTvERN+N8150sDeSVPecdgSiVApDlGXmMua1XTlG4mg OzJx0yrgGPv3wRM3+Fnht11gSQcQ0jr8tQdIS0yEeZeZnBO+SpB014fTMTc4Dnlq 6StC/NJ6Zcgi2qPUWoun+M9FQCx609xuhVbqd3HxlqZwMvTFtstqDqbkr4GF7WDE chFAuqjb4RRYG6nOdQazyoHAYTNSaXIn6UyCHQHXGqhHMYMUthptUp0lkrF2nTV4 cN4uRE0KzqOF+X3grRexVuRMtP3L2zmDvjROCLurhspZUSpV+4ryjUQ8l9rBn6oN wIMowPcPDFSBUeqry0mMuhNoBtEWaUop+uZzbv/vsX0pPWrFkTsxXSzSkofGJ1th Q3Hd2epY+SUMSAGNUU2gvsUbJvgOs+MIJXafHUR2VzPk4THr+XcScGeC2IZpetrE WbuVD4GS+UcCKdE0kuIUX21aGeutkT1OLct0yJZrmEzFx9YSfzfLpVvRtYfOU61E +pqjM95LIgaKoFsBflC6Q+mtZu7dUHj6kK++Gr/M1mesT9w1Rv8= =FJM7 -----END PGP SIGNATURE----- --PnQ2OJBXVQycHOgLOdUQlMzRC2ExkRaqa--