Re: [Gendispatch] I-D Action: trust assets, draft-eggert-ietf-and-trust-00.txt

Brian E Carpenter <brian.e.carpenter@gmail.com> Tue, 25 October 2022 01:41 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: gendispatch@ietfa.amsl.com
Delivered-To: gendispatch@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 403F9C1522CF for <gendispatch@ietfa.amsl.com>; Mon, 24 Oct 2022 18:41:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.107
X-Spam-Level:
X-Spam-Status: No, score=-7.107 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9C9XXLWwUw_m for <gendispatch@ietfa.amsl.com>; Mon, 24 Oct 2022 18:41:13 -0700 (PDT)
Received: from mail-pj1-x102d.google.com (mail-pj1-x102d.google.com [IPv6:2607:f8b0:4864:20::102d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F4B5C1524D3 for <gendispatch@ietf.org>; Mon, 24 Oct 2022 18:41:13 -0700 (PDT)
Received: by mail-pj1-x102d.google.com with SMTP id ez6so9513017pjb.1 for <gendispatch@ietf.org>; Mon, 24 Oct 2022 18:41:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:in-reply-to:references:cc:to:from :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=Ova8Ky46rxZSqmmjM/hYtExu7hvoHoeCy/Te4jrP6wQ=; b=AtTojMrjM5xl6zgTc8oMEjaULzGHxOu51ILtvyhKdyGRTCld30AbsEz9Ie49hEtI/7 /RW9QxWx7lh5p2nicYzuQf6bWv5NmmcwX61tWEqRn+nQOUxQspk2BarUHwdZtcLFHmQf 9+NfjjcY+BS9CJlR0ozGnAWoYFWq7tKourr+nziRzZ/L1ulHgxuhCEMJ6hRyVWuXTJg7 cAgxLv5kPplJEWWD89LQ3z/SobemjWdmusiFgX2PLtG4tckXV92xO/IV23Qest3gtR48 zKZ01ZUa+Sqs4fbyIvIKu3HfacByHLu4SVt1rUpHGWAftP2pxtrk2HLko0GwPKxcQCqv i8kw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:in-reply-to:references:cc:to:from :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=Ova8Ky46rxZSqmmjM/hYtExu7hvoHoeCy/Te4jrP6wQ=; b=ZXG5aj8WUUMxNXY/HYwJqUiACL9enBfIZxnNetieXIFNzZAdIO/bdLDy8jIRMmEJKH oUEM8BVqIMrMG44dTo+QZgHjxHiJKDLAa6tASqsAIzm5Vk8/C8jr8LrgOzEv4vuFlqd5 K7B3JRAWMtFu/u0wfjeNu7HQM+A+czWaJOiIq/9G6gLyurNIGiy61C++oCObDmDpFfiW 8jVa6X04nUbxLhOpCTT4NQzPE1B5tyPPxGe9K5foP+wePP0bnY+R4gPCt/AP1LzSG2WC U5wAo2a+l3gUJxo9Qw2aJOBgF9qiBvD+7FGTw73z84bJ7A7PhkC4a9PsjWbzVp6J/Tjc ezwA==
X-Gm-Message-State: ACrzQf0fsM8+1cfMTow7fHs3rxCtJEw/NMaGDrVEULJ0ZM9l3q2fDT1P fVJLr3I4ewkVb2dZ+BHySNjpyrbHKF9PdQ==
X-Google-Smtp-Source: AMsMyM6nyKMbEXgwkbBTT7ak2tCa3ATnEJF4DKRtLQEkJ0e6j3QnKYVibGZ1728WTMAlGQcJTWcBEw==
X-Received: by 2002:a17:90b:4c8b:b0:213:ec:4431 with SMTP id my11-20020a17090b4c8b00b0021300ec4431mr11189381pjb.20.1666662072569; Mon, 24 Oct 2022 18:41:12 -0700 (PDT)
Received: from ?IPV6:2406:e003:1124:9301:80b2:5c79:2266:e431? ([2406:e003:1124:9301:80b2:5c79:2266:e431]) by smtp.gmail.com with ESMTPSA id p3-20020a170902e74300b00186b06963f9sm314116plf.180.2022.10.24.18.41.10 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 24 Oct 2022 18:41:11 -0700 (PDT)
Message-ID: <dc91e86c-611b-136b-b0aa-a98e5e5b3d42@gmail.com>
Date: Tue, 25 Oct 2022 14:41:07 +1300
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.10.0
Content-Language: en-US
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
To: John R Levine <johnl@taugh.com>, Lars Eggert <lars@eggert.org>
Cc: gendispatch@ietf.org
References: <20221022034724.49A774D1F7CC@ary.local> <AEDD55EF-3883-44A2-BE6E-233D4D8C7639@eggert.org> <bcc9a910-ada0-c491-0bc4-8ac4effecf50@taugh.com> <6beaaf54-8342-673f-a4c8-332edf529070@gmail.com>
In-Reply-To: <6beaaf54-8342-673f-a4c8-332edf529070@gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/gendispatch/S9BsKH3K2-0MVFQuXxfGo-8YnyM>
Subject: Re: [Gendispatch] I-D Action: trust assets, draft-eggert-ietf-and-trust-00.txt
X-BeenThere: gendispatch@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: General Area Dispatch <gendispatch.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/gendispatch>, <mailto:gendispatch-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/gendispatch/>
List-Post: <mailto:gendispatch@ietf.org>
List-Help: <mailto:gendispatch-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/gendispatch>, <mailto:gendispatch-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Oct 2022 01:41:17 -0000

Just for the sake of scientific integrity...

I wrote:

> A rough
> count of the number of distinct author names in the pre-5378 RFCs is
> 3810, although that includes some probable duplicates like 'V.Cerf' and
> 'V.G.Cerf'. (I wrote a Python script to compute that number. Run
> against the complete RFC index, it finds 6328 distinct author names.)

That was done quickly. After fixing some bugs and oversights, here are
better numbers, although they don't change the conclusion: too many people
to contact them individually.

Counting RFCs 1 to 5377
5249 RFCs found; 10964 total authors detected; 3590 unique identities.

Counting RFCs 1 to infinity.
9126 RFCs found; 22057 total authors detected; 5944 unique identities.

Note: Minor errors exist in data.
Authors with alternative initials are counted twice.

Regards
    Brian Carpenter

On 23-Oct-22 10:25, Brian E Carpenter wrote:
> On 23-Oct-22 05:02, John R Levine wrote:
>>> is that asset register publicly accessible?
>>
>> It's on the Trust's web site, with a link on the home page.  But if you
>> had trouble finding it, why didn't you ask?
>>
>>>> If you're wondering where the copyright or license info is for all of
>>>> the pre-3978 RFCs, other than a handful of licenses from ISI and a few
>>>> of the authors, there isn't any. As Joel noted, attempting to
>>>> determine the status of early RFCs would be a hugely expensive and
>>>> unproductive exercise in frustration. In a few cases I doubt that
>>>> anything short of a suit in a US federal court would resolve it (look
>>>> at RFC 20) and I hope none of us want to go there.
>>>
>>> I thought that when the Trust was established, it was supposed to
>>> actively approach authors of pre-5378 documents, especially core
>>> Internet specifications, to get the copyrights signed over. Has that
>>> effort been abandoned?
> 
> As far as I recall, the idea of "actively" approaching those several
> thousand authors was abandoned about 10 seconds after it was suggested,
> as completely impractical. It would have involved tracking down a large
> number of people, or in some cases their executors or heirs. A rough
> count of the number of distinct author names in the pre-5378 RFCs is
> 3810, although that includes some probable duplicates like 'V.Cerf' and
> 'V.G.Cerf'. (I wrote a Python script to compute that number. Run
> against the complete RFC index, it finds 6328 distinct author names.)
> 
> We (the original Trustees) did send messages to the obvious places
> asking people to sign the "RFC DOCUMENTS NON-EXCLUSIVE LICENSE"
> and some people did happily sign it, but the response was underwhelming.
> 
> It is absolutely true that not all the signed licenses are listed in the
> asset register; several more than the three listed were signed in 2007, but
> I have no records. I signed one myself. As a Trustee, I assumed that the
> IAD would retain and archive them. They may be gathering dust in a
> filing cabinet somewhere.
> 
> Overall, the pre-5378 boilerplate proved to be the only practicable
> solution, which puts the responsibility back on the (hypothetical)
> person wishing to make a derivative work. That scales, and I think
> it remains the only practical solution.
> 
>       Brian
> 
>> I wasn't around in 2006, but if you had asked I would have told you that
>> last year while I was a trustee I got licenses from two or three of the
>> early authors who I knew.  Those are the ones that aren't in the asset
>> register yet.
>>
>> But really, it's not that simple.  Anything published in the US before
>> 1976 without a copyright notice is in the public domain.  In many cases it
>> is unclear whether an author wrote an RFC as an individual, in which case
>> he can license the rights, or as an employee in which case whoever he was
>> working for at the time owns the rights, unless the employer was the US
>> government in which case it's public domain.  In many cases the employers
>> no longer exist, and I am unware of a practical way to figure out who
>> might have inherited their assets.  In a few cases (RFC20) it is not clear
>> whether the author even had the rights in the first place.
>>
>> And of course, some authors are dead.  We believe that Jon Postel wrote
>> all his RFCs as an ISI employee, and we have a license from ISI, so we're
>> OK there.
>>
>> Once again, if this was important, why didn't you ask?
>>
>>> I'm sorry if the tone comes across as adversarial, that is not the
>>> intent. The intent is to capture the IETF community's expectations of
>>> the Trust.
>>
>> If that is truly the intent, I strongly encourage you to withdraw this
>> error riddled draft and talk to the trustees about all the assertions you
>> made so you can at least get your facts straight.
>>
>> I entirely agree that the trust's early recordkeeping was poor, and I was
>> as surprised as anyone that there's supposed to be a decade old HSM
>> somewhere.  But it is not 2006 any more, and I believe that the current
>> trust is a lot different from what this document implies.
>>
>> Regards,
>> John Levine, johnl@taugh.com, Taughannock Networks, Trumansburg NY
>> Please consider the environment before reading this e-mail. https://jl.ly
>>