Re: [Gendispatch] New Version Notification for draft-thomson-gendispatch-rfc-derivatives-00.txt

Eric Rescorla <ekr@rtfm.com> Thu, 28 September 2023 16:07 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: gendispatch@ietfa.amsl.com
Delivered-To: gendispatch@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 41888C1519B5 for <gendispatch@ietfa.amsl.com>; Thu, 28 Sep 2023 09:07:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level:
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20230601.gappssmtp.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wwjvoZrvVB7h for <gendispatch@ietfa.amsl.com>; Thu, 28 Sep 2023 09:07:56 -0700 (PDT)
Received: from mail-yb1-xb30.google.com (mail-yb1-xb30.google.com [IPv6:2607:f8b0:4864:20::b30]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F3AD0C14EB19 for <gendispatch@ietf.org>; Thu, 28 Sep 2023 09:07:55 -0700 (PDT)
Received: by mail-yb1-xb30.google.com with SMTP id 3f1490d57ef6-d84c24a810dso15143922276.2 for <gendispatch@ietf.org>; Thu, 28 Sep 2023 09:07:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20230601.gappssmtp.com; s=20230601; t=1695917275; x=1696522075; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=NU7AX0plAPDdFxnbHbT2eTLnAQ7pksBbvfBlYYZi6tk=; b=FBnM4Jd7NhZHq2vjGTnhO8RX0IWcKmcQ4fBC6+7zU1Js69xH1/5c4fsEP3YApZGJLT DlJJReQw/WQFh3b2ut6luv5+t3gKVQ6YNH0MiGVnmHS2UFWOKB9ZvZCXYI6Z+rk6QNjI lO8FavOiunkoOCJ2C2C+MNotHAQEPk7QKLRQv0ioQeG3h7s+rs2XjmbI+SscVIezFp4j EZuauRMn0bHhiftLVM9JOBMZp3qKkOONit7hBTFel0rRdp9pbYc/t0HEeo5RBGAMIhmK aEWsob+wlqNc6typcjHDfTyW7kEbjqyyWi+6Qcz/Pk0w2OeBHRBlBKE1MEhz1D3KtMRy 5ysw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1695917275; x=1696522075; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=NU7AX0plAPDdFxnbHbT2eTLnAQ7pksBbvfBlYYZi6tk=; b=I+ea5fnkXQOaSCqUlOfdA61YzxYDMCO7Eypadu2YLBLXCUqtAwDx1z848YyGD8yHdv kZMr6kgves8ShdVo/LHjqOSzMhugnNNTcRv80Z1TMSkc7VxgOacNGC4R3aZv2bhkjFWg G5LtDQuxtwVM9nHJbLVA7l63DChhb/aKyNXgq8JCMPd2hh45cXreHB1Rc/Vucd5XAq2Y tyCFknYs/9UTizkCYCYQRV+bkP79ivqOZwqGe7cfAUCLE2LaYKwkQfJT0+mUhL/wkNaM pBoUVlSxH25bm9AX9iBl/pZEkSrA6s9lng6+6QACyN7Nxor+n//8dGlfs/o4rctGrsF0 sBPw==
X-Gm-Message-State: AOJu0YwFHgfoBY3nYGfCBzyjJC8HAHEiuC/AYBPjKbjofBFm5vkJjvO1 B7Y19Mr4BRS6XS6qADxSInT4eDv8hVgNlMHkf+08B+qcD+FCeag8
X-Google-Smtp-Source: AGHT+IEZwf7XuqRLOKsi3OfD5ojMkeV+usXOB7VE0tP/7lhHkkKzQg9U+hO+UCRcKIpRFq5kcsnmGeE1NrbyByj/bfg=
X-Received: by 2002:a25:664a:0:b0:d7b:9a5d:37c with SMTP id z10-20020a25664a000000b00d7b9a5d037cmr1607227ybm.49.1695917274694; Thu, 28 Sep 2023 09:07:54 -0700 (PDT)
MIME-Version: 1.0
References: <169587871859.41935.17692726615817157868@ietfa.amsl.com> <3c7a5635-6a18-445e-9483-22ebfe31e1d5@betaapp.fastmail.com> <a970d95a-fbdc-8271-bbbc-889de7c6ac87@joelhalpern.com> <CABcZeBNgdb4ZtEqVeG6D=H617UrHG9SgktmZaLG_TjKZFMVvZg@mail.gmail.com> <17e3ec59-7568-4636-09f2-f4be9cf0f0d5@joelhalpern.com>
In-Reply-To: <17e3ec59-7568-4636-09f2-f4be9cf0f0d5@joelhalpern.com>
From: Eric Rescorla <ekr@rtfm.com>
Date: Thu, 28 Sep 2023 09:07:18 -0700
Message-ID: <CABcZeBNzG+Gs_GZO1pdFfEirkMGU3SQpyimy4FXy0byk3SxStg@mail.gmail.com>
To: Joel Halpern <jmh@joelhalpern.com>
Cc: Martin Thomson <mt@lowentropy.net>, gendispatch@ietf.org
Content-Type: multipart/alternative; boundary="000000000000ba1c7c06066d82df"
Archived-At: <https://mailarchive.ietf.org/arch/msg/gendispatch/1QYb5jWQBg7kDSAY4RsurTP3MGA>
Subject: Re: [Gendispatch] New Version Notification for draft-thomson-gendispatch-rfc-derivatives-00.txt
X-BeenThere: gendispatch@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: General Area Dispatch <gendispatch.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/gendispatch>, <mailto:gendispatch-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/gendispatch/>
List-Post: <mailto:gendispatch@ietf.org>
List-Help: <mailto:gendispatch-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/gendispatch>, <mailto:gendispatch-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Sep 2023 16:07:58 -0000

On Thu, Sep 28, 2023 at 8:19 AM Joel Halpern <jmh@joelhalpern.com> wrote:

> I have not asked the lawyers, but I  do think that if you claim your
> different spec is RFC xxxx, the community would probably expect the Trust
> to try to stop that.  I am not sure what tools we have, since as you
> suggest, our trademark is on IETF.
>
I would note that there are already several organizations which already
publish "RFCs" so I'm also not sure what basis we woul dhave.


> As we do not trademark protocol names, you presumably are free to make up
> your own "QUIC" or "IPv6" and try to convince people it was the real
> thing.  As you say, unless you were an author of the specification you
> would have to avoid using the IETF's words.
>
In practice, I suspect even if you were, because generally the authors do
not
contribute *all* of the text.

I am not asking that we tighten our legal protctions further (I can see way
> too many ways that would create problems).  But as far as I can tell, the
> proposed change would constitute endorsing the kined of behavior you
> describe below.  Which even if we can't prevent, we certain want to
> discourage.
>
> At the same time, I fail to see any benefit in permitting derivative
> works.  We do permit verbatim quoting with attribution.  The fact that what
> we permit is insufficient for some open source licenses to include the RFC
> in their documentation.  While I can hypothesize other cases, the draft
> does not make any such assertions.
>
> In fact, while you state that you agree that having multiple specs is a
> problem, the draft seems to claim it is beneficial.
>
Yeah, I realized after I posted my message that I could have written that
more clearly.

I do not think it is a desirable state of affairs for there to be multiple
competing
versions of a spec. However, it is also not good to have a situation where
the
SDO that originally authored the spec is, for whatever reason, not
meaningfully
maintaining it, or the community has gone elsewhere. In that case, I do
think it
is good if that other venue can take over the spec. Does that help clarify
my view (which may not be the view of my co-authors)?

-Ekr


-Ekr

Yours,
>
> Joel
> On 9/28/2023 11:00 AM, Eric Rescorla wrote:
>
>
>
>
> On Thu, Sep 28, 2023 at 6:52 AM Joel Halpern <jmh@joelhalpern.com> wrote:
>
>> I think this is a very bad idea.
>>
>> The point of the IETF process is to reach agreement on standards we can
>> live with that are good for the Internet.  If anyone who doesn't like
>> the agreement, even if they could live with it, can go make a different
>> standard it undermines the value and effort we put in to reach those
>> agreements.   The value to vendors and operators of having a standard
>> (whenver we can reach that goal) is to have itneroperable
>> implementations and only need to implement / support / deploy that
>> standard.  If there are a myriad standards (as is the inherent
>> consequence of allowing folks to fork RFCs) then we remove the value
>> proposition.
>>
>> If someone merely wants to build upon our standards, they already can.
>> What is at stake is the ability for other folks to change IETF RFCs.  I
>> see no value in permitting that.
>>
>
> Hi Joel,
>
> First, let me say that  I agree that it's not desirable to have multiple
> competing versions
> of a different protocol, so I think on that we are on the same page. Where
> I think we
> may disagree is on whether permitting people to use the text in IETF RFCs
> in
> their own specifications has a meaningful impact on whether that happens.
>
> It might be useful to start by putting the question of text aside. Suppose
> that
> I think that the IETF is taking protocol XYZ in the wrong direction. Under
> the current
> IPR rules, I don't think anything precludes me from:
>
> 1. Writing a new document that is wire compatible with XYZ but doesn't use
> the
> words from the IETF specification.
> 2. Calling that protocol "XYZ" in the document.
> 3. Calling that specification an "RFC" and in fact using the same number
> as the
> IETF specification.
> 4. Publishing the specification on my site.
>
> I *do* think I am precluded from using the trademark "IETF".
>
> Do you disagree with any of the above?
>
> -Ekr
>
> Yours,
>>
>> Joel
>>
>> On 9/28/2023 1:50 AM, Martin Thomson wrote:
>> > I raised a question during the IETF 117 plenary.
>> >
>> >>
>> https://www.ietf.org/archive/id/draft-thomson-gendispatch-rfc-derivatives-00.html
>> >>
>> https://datatracker.ietf.org/doc/html/draft-thomson-gendispatch-rfc-derivatives
>> >>
>> >> Abstract:
>> >>
>> >>     The IETF Trust holds rights to RFCs.  This document updates RFC
>> 5377
>> >>     to request that the IETF Trust change its licensing for IETF
>> >>     documents to permit the creation of derivative works.
>> > This is a relatively simple request, but - based on previous
>> discussions on this subject - I'm sure it will be quite controversial.
>> >
>> > Firstly, there is no plan (at least that I'm aware of) to fork the IETF
>> or to take any RFC to another venue.  The authors are pursuing this work
>> because we believe that it is the right thing to do. We believe that this
>> change is consistent with the IETF mission and the principles of open
>> standards that this community abides by.
>> >
>> > More liberal licensing on RFCs will make it easier for people to
>> continue with the maintenance of IETF work, especially when the IETF has no
>> desire or ability to do so itself.
>> >
>> > This would go beyond the excerpting licenses that are included in some
>> RFCs (for example, RFC 6716), where people independently license their
>> contributions independent of the license they grant the IETF Trust, or the
>> inconsistent fair use carve-outs that are available in some jurisdictions.
>> >
>> > Some people have observed that this makes it easier to copy IETF work
>> with the intent of confusing the market.  We have requested the inclusion
>> of what we think are reasonable conditions in the draft.  These conditions
>> are targeted at the potential for misrepresentation and include a
>> requirement to acknowledge the original and its authors, plus a stipulation
>> that protocols use a different name.
>> >
>> > The best defense against this sort of abuse is not copyright
>> protections.  My non-legally-trained understanding is that the IETF cannot
>> copyright a protocol anyway, only its specification can be protected. Our
>> best defense is the quality of the work performed here and the excellent
>> reputation of this institution.
>> >
>> > If there is time on the (already packed) gendispatch agenda, I'd
>> appreciate it if some time could be made for this topic.
>> >
>> > Cheers,
>> > Martin
>> >
>>
>> --
>> Gendispatch mailing list
>> Gendispatch@ietf.org
>> https://www.ietf.org/mailman/listinfo/gendispatch
>>
>