Re: [Gendispatch] I-D Action: trust assets, draft-eggert-ietf-and-trust-00.txt

Brian E Carpenter <brian.e.carpenter@gmail.com> Sat, 22 October 2022 21:25 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: gendispatch@ietfa.amsl.com
Delivered-To: gendispatch@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4AE0BC14F612 for <gendispatch@ietfa.amsl.com>; Sat, 22 Oct 2022 14:25:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.107
X-Spam-Level:
X-Spam-Status: No, score=-2.107 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gv3gSqOUAeeY for <gendispatch@ietfa.amsl.com>; Sat, 22 Oct 2022 14:25:22 -0700 (PDT)
Received: from mail-pj1-x1032.google.com (mail-pj1-x1032.google.com [IPv6:2607:f8b0:4864:20::1032]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB237C14F722 for <gendispatch@ietf.org>; Sat, 22 Oct 2022 14:25:22 -0700 (PDT)
Received: by mail-pj1-x1032.google.com with SMTP id l22-20020a17090a3f1600b00212fbbcfb78so187433pjc.3 for <gendispatch@ietf.org>; Sat, 22 Oct 2022 14:25:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=Y85yP6XU9VA2h+rkajo+WFjXSrauaN+6y3dEjTqfuYw=; b=EovJMmH/SHouPL1WVHvPSwC5QdOm1TQfPJ8uiEXXIgztYQZZS6scQ6pHisLSt6ksCQ EB/nM1j7lFHRoY+duPJkApTq3C2pI5AVvWCxNE/23HWiRtKmtbFUA9AgOHkSNl5Z0MlI IuXgmq/zIifTQt00krI/8lH3ly6gd5cCY/YFEwv9TzvJhh6T2v/3jvoIXHIO9ahy+eRY SdZIcfvMBJgYpGifx5eLtABlWhlJCu4BI+hyY1HAk+Auyv54UjsGmiEPhLbPNL2OynK8 2Bw8EhYYYMCjF3XidjV14TZTHPjEe9izQ+00SaAZEoocixhfFmM4/hP3czu9/WkRDK5u TtJg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=Y85yP6XU9VA2h+rkajo+WFjXSrauaN+6y3dEjTqfuYw=; b=rzkICvZoQoorK2cv27JIXaujJc1ZHXxw6LWIUd6s8SCfReK7pyf236k7p479vmpioz ZrwPepQtMcRaRpDq8L4x5O5q5O5Oj0OLj2d6pjFHFpzrrFzPIebSRK2D6khCN43t+yr7 C559GE79ybMlf4S6Z5gwx4WfJy+FXBOt3F+F6AMQ19KUaItPFnClSFVllloiWgcdveQP wILAGPBejDAFpo1vCZL9hMa4d+uXYQ99M16Ek/mZgx3/yJUSKzc9gtuoHBJZHIyMPXkV wsUY30/ye27DCJppgCBBCA0D7DEowrtd6PMOjdxLn3ccfq4b/i8JEhIzfDvDeiWoXMaB B1hg==
X-Gm-Message-State: ACrzQf1I/mgQ9WECHba4NFSCYGl9oKCHiK/7C6eHuYOb1rbUHfVO2qZC WoABwX8ZPWz0SemvAfIOvc8=
X-Google-Smtp-Source: AMsMyM7dwRB7rqV2Q9KwreebQZSUy3kJHSDjsUgybj0pfrWIl5iIPcDIpK81cUa/Hprldl5jajfBew==
X-Received: by 2002:a17:902:e5c5:b0:186:5f09:8468 with SMTP id u5-20020a170902e5c500b001865f098468mr17332352plf.122.1666473921966; Sat, 22 Oct 2022 14:25:21 -0700 (PDT)
Received: from ?IPV6:2406:e003:1124:9301:80b2:5c79:2266:e431? ([2406:e003:1124:9301:80b2:5c79:2266:e431]) by smtp.gmail.com with ESMTPSA id p14-20020a170902780e00b0017d7e5a9fa7sm12653943pll.92.2022.10.22.14.25.19 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sat, 22 Oct 2022 14:25:20 -0700 (PDT)
Message-ID: <6beaaf54-8342-673f-a4c8-332edf529070@gmail.com>
Date: Sun, 23 Oct 2022 10:25:15 +1300
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.10.0
Content-Language: en-US
To: John R Levine <johnl@taugh.com>, Lars Eggert <lars@eggert.org>
Cc: gendispatch@ietf.org
References: <20221022034724.49A774D1F7CC@ary.local> <AEDD55EF-3883-44A2-BE6E-233D4D8C7639@eggert.org> <bcc9a910-ada0-c491-0bc4-8ac4effecf50@taugh.com>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
In-Reply-To: <bcc9a910-ada0-c491-0bc4-8ac4effecf50@taugh.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/gendispatch/BVs7tU1D1EUtVWMN4QcZHn54c-s>
Subject: Re: [Gendispatch] I-D Action: trust assets, draft-eggert-ietf-and-trust-00.txt
X-BeenThere: gendispatch@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: General Area Dispatch <gendispatch.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/gendispatch>, <mailto:gendispatch-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/gendispatch/>
List-Post: <mailto:gendispatch@ietf.org>
List-Help: <mailto:gendispatch-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/gendispatch>, <mailto:gendispatch-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 22 Oct 2022 21:25:28 -0000

On 23-Oct-22 05:02, John R Levine wrote:
>> is that asset register publicly accessible?
> 
> It's on the Trust's web site, with a link on the home page.  But if you
> had trouble finding it, why didn't you ask?
> 
>>> If you're wondering where the copyright or license info is for all of
>>> the pre-3978 RFCs, other than a handful of licenses from ISI and a few
>>> of the authors, there isn't any. As Joel noted, attempting to
>>> determine the status of early RFCs would be a hugely expensive and
>>> unproductive exercise in frustration. In a few cases I doubt that
>>> anything short of a suit in a US federal court would resolve it (look
>>> at RFC 20) and I hope none of us want to go there.
>>
>> I thought that when the Trust was established, it was supposed to
>> actively approach authors of pre-5378 documents, especially core
>> Internet specifications, to get the copyrights signed over. Has that
>> effort been abandoned?

As far as I recall, the idea of "actively" approaching those several
thousand authors was abandoned about 10 seconds after it was suggested,
as completely impractical. It would have involved tracking down a large
number of people, or in some cases their executors or heirs. A rough
count of the number of distinct author names in the pre-5378 RFCs is
3810, although that includes some probable duplicates like 'V.Cerf' and
'V.G.Cerf'. (I wrote a Python script to compute that number. Run
against the complete RFC index, it finds 6328 distinct author names.)

We (the original Trustees) did send messages to the obvious places
asking people to sign the "RFC DOCUMENTS NON-EXCLUSIVE LICENSE"
and some people did happily sign it, but the response was underwhelming.

It is absolutely true that not all the signed licenses are listed in the
asset register; several more than the three listed were signed in 2007, but
I have no records. I signed one myself. As a Trustee, I assumed that the
IAD would retain and archive them. They may be gathering dust in a
filing cabinet somewhere.

Overall, the pre-5378 boilerplate proved to be the only practicable
solution, which puts the responsibility back on the (hypothetical)
person wishing to make a derivative work. That scales, and I think
it remains the only practical solution.

     Brian

> I wasn't around in 2006, but if you had asked I would have told you that
> last year while I was a trustee I got licenses from two or three of the
> early authors who I knew.  Those are the ones that aren't in the asset
> register yet.
> 
> But really, it's not that simple.  Anything published in the US before
> 1976 without a copyright notice is in the public domain.  In many cases it
> is unclear whether an author wrote an RFC as an individual, in which case
> he can license the rights, or as an employee in which case whoever he was
> working for at the time owns the rights, unless the employer was the US
> government in which case it's public domain.  In many cases the employers
> no longer exist, and I am unware of a practical way to figure out who
> might have inherited their assets.  In a few cases (RFC20) it is not clear
> whether the author even had the rights in the first place.
> 
> And of course, some authors are dead.  We believe that Jon Postel wrote
> all his RFCs as an ISI employee, and we have a license from ISI, so we're
> OK there.
> 
> Once again, if this was important, why didn't you ask?
> 
>> I'm sorry if the tone comes across as adversarial, that is not the
>> intent. The intent is to capture the IETF community's expectations of
>> the Trust.
> 
> If that is truly the intent, I strongly encourage you to withdraw this
> error riddled draft and talk to the trustees about all the assertions you
> made so you can at least get your facts straight.
> 
> I entirely agree that the trust's early recordkeeping was poor, and I was
> as surprised as anyone that there's supposed to be a decade old HSM
> somewhere.  But it is not 2006 any more, and I believe that the current
> trust is a lot different from what this document implies.
> 
> Regards,
> John Levine, johnl@taugh.com, Taughannock Networks, Trumansburg NY
> Please consider the environment before reading this e-mail. https://jl.ly
>