Re: [Gendispatch] I-D Action: trust assets, draft-eggert-ietf-and-trust-00.txt

Lars Eggert <lars@eggert.org> Mon, 24 October 2022 07:07 UTC

Return-Path: <lars@eggert.org>
X-Original-To: gendispatch@ietfa.amsl.com
Delivered-To: gendispatch@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E3CAC1522A6 for <gendispatch@ietfa.amsl.com>; Mon, 24 Oct 2022 00:07:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.107
X-Spam-Level:
X-Spam-Status: No, score=-2.107 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=eggert.org
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WFMJtBanLE2Y for <gendispatch@ietfa.amsl.com>; Mon, 24 Oct 2022 00:07:09 -0700 (PDT)
Received: from mail.eggert.org (mail.eggert.org [IPv6:2a00:ac00:4000:400:211:32ff:fe22:186f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC60DC1522B8 for <gendispatch@ietf.org>; Mon, 24 Oct 2022 00:06:41 -0700 (PDT)
Received: from smtpclient.apple (unknown [IPv6:2a00:ac00:4000:400:c4c:e5f9:1db5:c2ce]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.eggert.org (Postfix) with ESMTPSA id D4C1F1DC263; Mon, 24 Oct 2022 10:06:29 +0300 (EEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=eggert.org; s=dkim; t=1666595189; bh=FsNS8yOcxWyQLtkGneNygm+hA3NWvqHhGQgAc/lu3kI=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=OfcNoY9XVgP+4aO8zqUNkgI3EtcsRqAbAuGu7NWYQ6QdlbTXCFcvk301c49jKu0r+ AKJeSFhf0e5jlPpunxbFmQTbY2ExCLGo95V9fQaFi1yRt7guRpRp04OU3om6sw/RFa mFaVVK9lwlXqnolBBoduGjOLEHITeIhIuT6A1f4U=
Content-Type: multipart/signed; boundary="Apple-Mail=_53C021BA-AAEC-4817-B30F-61B381B79A9C"; protocol="application/pgp-signature"; micalg="pgp-sha512"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.120.41.1.1\))
From: Lars Eggert <lars@eggert.org>
In-Reply-To: <bcc9a910-ada0-c491-0bc4-8ac4effecf50@taugh.com>
Date: Mon, 24 Oct 2022 10:06:29 +0300
Cc: gendispatch@ietf.org
Message-Id: <22F6EEA0-34D0-433C-AE71-DA75F45E3F61@eggert.org>
References: <20221022034724.49A774D1F7CC@ary.local> <AEDD55EF-3883-44A2-BE6E-233D4D8C7639@eggert.org> <bcc9a910-ada0-c491-0bc4-8ac4effecf50@taugh.com>
To: John R Levine <johnl@taugh.com>
X-MailScanner-ID: D4C1F1DC263.A6C9D
X-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details
X-MailScanner-From: lars@eggert.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/gendispatch/JBx-n7sEh36Uzc76JKT_SXlBT6A>
Subject: Re: [Gendispatch] I-D Action: trust assets, draft-eggert-ietf-and-trust-00.txt
X-BeenThere: gendispatch@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: General Area Dispatch <gendispatch.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/gendispatch>, <mailto:gendispatch-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/gendispatch/>
List-Post: <mailto:gendispatch@ietf.org>
List-Help: <mailto:gendispatch-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/gendispatch>, <mailto:gendispatch-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Oct 2022 07:07:14 -0000

Hi,

On 2022-10-22, at 19:02, John R Levine <johnl@taugh.com> wrote:
> is that asset register publicly accessible?
> 
> It's on the Trust's web site, with a link on the home page.  But if you had trouble finding it, why didn't you ask?

well, I did find that page, and Section 2.4.1 of the I-D briefly discusses that it seems to be incomplete. I had hoped the Trust had a more detailed non-public asset registry it worked off of.

>> I thought that when the Trust was established, it was supposed to actively approach authors of pre-5378 documents, especially core Internet specifications, to get the copyrights signed over. Has that effort been abandoned?
> 
> I wasn't around in 2006, but if you had asked I would have told you that last year while I was a trustee I got licenses from two or three of the early authors who I knew.  Those are the ones that aren't in the asset register yet.

So that bring us back to Section 2.2, and the lack of published procedures for management of the Trust assets.

If individual authors signed copyrights over to the Trust, on what timeline can the community expect such actions to be reflected in the asset registry? What is the pipeline of such transactions and how does the Trust ensure that when individual Trustees acquire licenses those don't get lost when they rotate of the Trust? I also don't see this particular transfer of assets mentioned in the 2021 minutes or announcements.

The Trust's entire reason for being is to hold assets. I would expect a detailed archival record of such assets (and the procedures by which they are acquired, managed, licensed and possibly released) to be an absolute necessity for doing that. We can discuss how much of it should be public - I see no reason that all of it shouldn't be, but that is a separate discussion - but surely it needs to exist?

> But really, it's not that simple.  Anything published in the US before 1976 without a copyright notice is in the public domain.  In many cases it is unclear whether an author wrote an RFC as an individual, in which case he can license the rights, or as an employee in which case whoever he was working for at the time owns the rights, unless the employer was the US government in which case it's public domain.  In many cases the employers no longer exist, and I am unware of a practical way to figure out who might have inherited their assets.  In a few cases (RFC20) it is not clear whether the author even had the rights in the first place.
> 
> And of course, some authors are dead.  We believe that Jon Postel wrote all his RFCs as an ISI employee, and we have a license from ISI, so we're OK there.
> 
> Once again, if this was important, why didn't you ask?

You keep saying I didn't ask. We did ask, a copy of this I-D was sent to the Trustees for comment a few weeks back.

> I entirely agree that the trust's early recordkeeping was poor, and I was as surprised as anyone that there's supposed to be a decade old HSM somewhere.  But it is not 2006 any more, and I believe that the current trust is a lot different from what this document implies.

So this brings us back to Section 2.4. Once the Trust discovered that "early record keeping was poor" and that it has lost track of some assets, has it brought that up with the community and proposed a plan to rectify the situation?

Thanks,
Lars