From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 0202D138334 for ; Tue, 2 Oct 2018 20:29:30 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id CD3BAE08FE; Tue, 2 Oct 2018 20:29:29 +0000 (UTC) Received: from smtp.gentoo.org (dev.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 76AA4E08FC for ; Tue, 2 Oct 2018 20:29:29 +0000 (UTC) Received: from [192.168.10.30] (ool-4571a16e.dyn.optonline.net [69.113.161.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: np-hardass) by smtp.gentoo.org (Postfix) with ESMTPSA id 6D6F2335CD2 for ; Tue, 2 Oct 2018 20:29:22 +0000 (UTC) To: gentoo-project@lists.gentoo.org References: <23325.35685.793702.267278@a1i15.kph.uni-mainz.de> <23337.15822.698153.812236@a1i15.kph.uni-mainz.de> <14e33478-835e-33ec-5d68-5ccb05fb2a9d@gmail.com> From: NP-Hardass Openpgp: id=862040BE422755F27FDE13D5671C52F118F89C67; url=https://sks-keyservers.net/pks/lookup?op=get&search=0x671C52F118F89C67 Autocrypt: addr=NP-Hardass@gentoo.org; prefer-encrypt=mutual; keydata= xsFNBFTkWCYBEADjDSP3/MDba3hDgUjy/8w2PU/kzx+AWwWkXuA3zUhBnS7AVK2Zh5gajysZ OWAkmZ0VmrzSHICQzYosyhq+YVIdTg5LvIxsG1fj2rSEMbqk9mtjdNDsoUmzUkECOL/Txph1 u46vtnMy97Gs82imE3uCBIQkxc+aUesePXeQGOh6EDcxMvFcn8x1lhXE244lES5Spu72Wen4 cYRpPboRTbuUxXUwrOIAOzF2eX5BDipZVKmrV9i5SC3oQIG1MnJdHDLWhDm3XQjlEsvH5Rge 55bvXFVs6Hzdv3SUI330E6W15kLt0Ij94nJqOgWCPfKu+7Tb2UYlVlCkiIFujIWxLGaQRXU2 3wOu7TuGJ0NQzP1lwCImdydEF+BL61l6awFI1ixwgZQGkzaEvXMhc6PltM12y5poFvcQXK+P aLdztY0cLSlhg36HZb+E8bavNLLIw4tJ2LKx8YmMNFfoIVAN33wU2QZ08SyT5VTCi8svU0U+ 2n8e3TA23gx+OHyUvjwNdFm5NDi0sIpeYpgMfUSjTO7pq0JEAQLTY//9MjqmmicXpvMnqA2X NrZZXaxs19yApzxfbFQegg9tgNiSeYONtIXWQinznfv+h3GY7K6zKhyq5IL0ji/Gf2l/+1WD VB/h6OJGbKqydPZnBiQRC6mt/lpkE5/Z1qHzzrNlTT0RTdNDlQARAQABzSJOUC1IYXJkYXNz IDxOUC1IYXJkYXNzQGdlbnRvby5vcmc+wsGWBBMBCABAAhsDBwsJCAcDAgEGFQgCCQoLBBYC AwECHgECF4AWIQSGIEC+QidV8n/eE9VnHFLxGPicZwUCWi8lgwUJCQ00XQAKCRBnHFLxGPic Z7toD/9BlYZ9Lk7ejlvkenz+EPqySkZAHERwUS5hqBiOTarVJZtjm7uGCbzhCltInsWKHREN jIboWsCzHPdnqeQ7BiRjUCbLXctqsW9kWvxBxJaCKqy9XqG7WWqgm7gxqYxDp9EM4mV1JeU4 aSXkLJu/JlLaC0FWvQNFJZhhK7VQwcMmz1mmFZayXFce/lpKn2NWwqQc6gKRQlBvKaY+ohpP 0Ixt7SiU2FqgsfR8tsGxiMaZnq4ULbfzOtee3zSzIaPpF1EzoKmnNKzVdSW7QY94OJQKkFmt KWi0+yk2lYfMVPiYC+Ph8FXe0Cqk//nECA+OGtvLo5bc7mtgCdCqfQVo7ds0HQ9gdW8Hq55u evrVN+6TwoPr0n50wckJ3cQy9Yj1gKWJO/XNciLJoZ2fJ9jAsaP9LlITKeLI1yWqt2LaNMfP gVn4eS/jNstuMvyA0qgmELQ/VItDrC30ow7I8yarPlBpywIW8jpBZQeujujshDfmYJJatt72 ETT6Us5f/zDpb7V8g+feReUzo1bDsIlXxhSC/hrJIQUdsRj5kM2cHgMttdj5/+9mMhxLVXkK AlgJs2evnp3WmrOovYoLfN/pkVyxAbXKu0Y/c7L+NMPRHW+V3oUXGrphw+Uh/S+d3NHG3gGz 1Y0H6OyHHai9f8iXu4aTqhVatNZFmYlywlS3/Wz/Lc7BTQRU5FgmARAA4ThPsCyVb6QBhtRU 5vUuWMuzhXpdUr151ccXYqYBXn1h45hW9qoZo8Y7xQp6cGJSECSNmTkJU9FMN48Ewn3+YIxa uJOWar+eCvh++TvPVqjo/UQZqTK29NUBiL5aSC0pU49Z5Ve2TXYGhdcZT0OQM4A1MTlRfIaV tqlPfoqifsNGjiwpjRoo4AWYADIfhajvHCDJ5ITka+T07DBFOBSy98SaoKNfdaClb6tmLBs7 hroKpCCijfBe20UMeaKN6zQuhW8GR3VzpRC/G9HBEmH6GxiVmBkhEQjgX5aTS7T/jz2YZrI6 mS3zKZ7gEByjhxUOS83UON99aOqnMPUphXnjIPIPydBHYVlY4egLKPI91nFAZv5DYIzyERux KE2w2f9Xns7wyEOYhqddOTZ0lio4oQCc/sR040rKtL6qOciC1z3jDeYTrQE410eGF71SvuiN ceThbAty26zYQAFxvlimrgTTVkLOSsCz6+/SWoD42gwVYwQ4hRoCwYzuC/ILGmECoiJXFgtR A/gK/5g7c05depLSo9VH8/+b4Cxqt+U9+beqfxtr+9b5w9ut6AZcZLj25s40gc19nJQkEl49 S2XfJ7lkczuBj2K8T0ZZ82woPDu2W3UORYU0iW+0WuEZ5DIZsOy5g8YWYFoeWfzI9TPkHAAd ccZtE8r1h2IoQ7RBSr0AEQEAAcLBfAQYAQIAJgIbDBYhBIYgQL5CJ1Xyf94T1WccUvEY+Jxn BQJaLyVzBQkJDTRNAAoJEGccUvEY+Jxnf8YP+wQlCLyFetSuMHd3ZO36HE1ohU+Mvspa6Z1a 97K1ECG9xDNNodHtQ7j1qCTYqKH2N2RWgErowk9RT8y8ok+1fJHD/94qYpmb++R1g2m1XmEC tssGv40uHI0TxVdwu3xpfdGTW8roQOMngoTP0RW5BNWTqfAv7+LEMbD9kber1AbyLJzxYdgU sxwHnQ6pRdcyb75drG9Mo1br8s6knTvW2i+5JCKSud/oexvSC0w2SegPvlsrqPWJoWQ5Yo7g IAQQG6KjdYoVy3m/goNcXiIHnuFv5dWfnOyP+Th2sVgy2VX3M9jsejFvXABYwVyslkIXFudm UqofjSD7OAz9jMOrAgMKdI6ez40GJaK9/aCEynm1ckwzEBpjB9H3TtXuhxwsFB/HqIMxYRCw 7vrKh7of3kzc6nsmn07Nd8sPElx/4wTc6QXyM4OXqmIE5tSgKYt3ns2o6PALqBpWx8FaHafg 4zFRY3+tEx0/lw8/yYDYiRRFfqkuiaqItL6ugSfUXdB13um+606IexFZCiwla1CtnGUx3Byw NQnAYOdUKHkKeQ9mYXGnScl6P6OJBXV5xBmINNmzaRGQWQAXN1/f3AJ7ZLqWdzOT96yKR1RY Qtfcn5WlfuZfjQBVNEWzzTZb/8hAlrFJLMwPUDl9AWz+surEACrh46BT4W2voigsA7dibW6E Subject: Re: [gentoo-project] [RFC] GLEP 76: Copyright Policy [v4] Message-ID: <72d18d67-1c32-33dd-8b62-fd7b3bdeba3c@gentoo.org> Date: Tue, 2 Oct 2018 16:29:19 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Project discussion list X-BeenThere: gentoo-project@lists.gentoo.org Reply-To: gentoo-project@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="brefXBPR2PBUvozbzzY0Z9OsY8zm4BgyU" X-Archives-Salt: 182ea36b-23a5-4278-a0c1-c62fae41c8e6 X-Archives-Hash: 6e3338a29b347b918efc9e5c4968cc8e This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --brefXBPR2PBUvozbzzY0Z9OsY8zm4BgyU Content-Type: multipart/mixed; boundary="3GRTHsTm1fSjXW6ULuKDCQduG7i9x1w46"; protected-headers="v1" From: NP-Hardass To: gentoo-project@lists.gentoo.org Message-ID: <72d18d67-1c32-33dd-8b62-fd7b3bdeba3c@gentoo.org> Subject: Re: [gentoo-project] [RFC] GLEP 76: Copyright Policy [v4] References: <23325.35685.793702.267278@a1i15.kph.uni-mainz.de> <23337.15822.698153.812236@a1i15.kph.uni-mainz.de> <14e33478-835e-33ec-5d68-5ccb05fb2a9d@gmail.com> In-Reply-To: --3GRTHsTm1fSjXW6ULuKDCQduG7i9x1w46 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 09/29/2018 03:46 AM, Ulrich Mueller wrote: >>>>>> On Fri, 28 Sep 2018, kuzetsa wrote: >=20 >> Summary / emphasis: the copyright protection for a >> legal entity or pseudonymous author (copyright holder) >> may also have validity outside the copyright holder or >> author's jurisdiction under the berne convention. >=20 > A work is protected by copyright even if it doesn't carry any copyright= > notice at all. Our policy requires a notice mainly to protect us agains= t > a possible "innocent infringement" defense under U.S. law: > https://en.wikipedia.org/wiki/Copyright_notice#Reasons_to_include_an_op= tional_copyright_notice >=20 > IANAL, but as I understand it, the requirements for the name that > appears in a copyright notice are rather lax, and your quote from the > Berne convention seems to confirm that. Also there is nothing in the > GLEP's wording that would forbid the use of a pseudonym in the copyrigh= t > notice, as long as it will qualify as an identifier of the copyright > holder. (The Signed-off-by line is a different issue, though.) >=20 > Ulrich >=20 "For commits made using a VCS, the committer shall certify agreement to the Certificate of Origin by adding Signed-off-by: Name to the commit message as a separate line. Committers must use their real name, i.e., the name that would appear in an official document like a passport.= " "By making a contribution to this project, I certify that: [...] The contribution was provided directly to me by some other person who certified 1., 2., 3., or 4., and I have not modified it." Which means a contribution of pseudonymous copywritten code cannot be made. The person making the commit cannot sign off on it unless the author signs off on it, and the author cannot sign off on it because that requires that the author not be pseudonymous. UNLESS you think this falls under #2: "The contribution is based upon previous work that, to the best of my knowledge, is covered under an appropriate free software license, and I have the right under that license to submit that work with modifications, whether created in whole or in part by me, under the same free software license (unless I am permitted to submit under a different license), as indicated in the file; or" Which, as written, means that the committer must make a modifications to the pseudonymous work to qualify as "[FOSS licensed and] created in whole or in part by me." The premise of which is that pseudonymous contributions aren't allowed unless the author submits it as a patch, not using a VCS (as contributions via VCS must use the Certificate of Origin), and the committer makes some trivial modification to them, and then, by magic, we avoid requirements for real names. Honestly, the whole thing comes across as a massive double standard/loophole with no real purpose behind it. If pseudonymous code is to be accepted for the sake of copyright, then how does one make a pseudonymous contribution? If one cannot make a pseudonymous contribution, then we should be stating that explicitly. [Quoted from elsewhere for the sake of reducing ML spam] > "Not sure how all that is relevant for the v4 update. The real name > was already required in v3, which has been accepted by both Council > and Trustees. > v4 is merely a clarification that rules for copyright notice (where a > legal entity can be listed) and sign-off (which must be by a natural > person) are different." TBH, just because this criticism is being levied at the time of v4 doesn't mean that the passing of v3 was without issue. --=20 NP-Hardass --3GRTHsTm1fSjXW6ULuKDCQduG7i9x1w46-- --brefXBPR2PBUvozbzzY0Z9OsY8zm4BgyU Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEv526yLNI+t7RHfJZHNlBHbKvGPsFAluz1R8ACgkQHNlBHbKv GPsrbxAAuAXdR4p8r9NKkOYG5NljKBXfcnLb19dMJhP2UPWIBxaeb9oPZOYVsoOv IyXlmiN/JZRgVjC+uhKiIpBHhNh+N+JdcDJw3NQsOgH0aHAfnIPFg8t1xhy6NeJQ xTrFlM4i9HZA28MiBg9DGze4sZ6f/CTv91UBlYScBn8bZW6Ru/DHBO7DqGn/pKci 1PyEKW5Ot19406PWtpuQifb2NnKU7B2ajMfEvm8KOXo+vD+scrgfaZh4tpW/BXaU Dv8gPFCyISUyPnWgPYtfRrwpluH9bIaGWwpT4wW4gE4ZEsSQOaG4rnQ32b3rO6ly 6A9L4eWP//6u7DS9P+pGtA5f4oHQ3fCDUA76jrUNQvpf2NSvE6IR9JmRbyOOZgwN 5VnYFm91XiZVQmaCL32++ZrqHydTU8nfBK6ZLKuoqZB3qCG9Xn1k95vSWshb4FzO dKj7IG563M5uP/AUGBzi5HQP5YKRlk24o7cUxh7Dm69X1/w2+ciwqgbnYtVr6WUL uXgW5QisPgeWvbTDhjv4phxIAmbOY/kVSSQVTCVE6kUMxkoqIXgioz0yLDDmi8dU yR34+0veKfL2b/Cz10pu8XMlunNqJAV+ymrYCHe004aXGYeyiJu6IOBhzMUVFeCJ 42DX7STyXcabT+z6CSg8fVXBMP8FxSla0ZZ+4rKzIjeklUCFsx4= =VlhA -----END PGP SIGNATURE----- --brefXBPR2PBUvozbzzY0Z9OsY8zm4BgyU--