Re: [TLS] [Ietf-honest] Last Call: draft-ietf-tls-extractor (Keying Material Exporters for Transport Layer Security (TLS)) to Proposed Standard

[Todd Glassey <[e-mail]>]

Nicolas Williams wrote:
> On Thu, Jul 23, 2009 at 03:11:52PM -0400, Dean Anderson wrote:
>   
>> On Thu, 23 Jul 2009, Matthew Campagna wrote:
>>     
>>>  The official statement is the linked document, we update it from time to time. 
>>>       
>> This is a problem. The official statement is the IPR disclosure, which
>> should contain the terms used by the IETF in its decision to approve the
>> document. Certicom should not be able to alter the terms after the fact,
>> which it seems to have just admitted doing.
>>
>> I think that we have to consider rejecting documents where the terms are
>> not definite and/or can be altered at the whim of the patent holder.
>>     
>
> There must at the very least be an audit trail and diffs for each
> change, otherwise an implementor might think they're not infringing on
> the basis of having read a version of an IPR disclosure that is later
> changed, and how would they prove this in court?
>   
Nico the real issue is the liability profile this opens for the IETF and 
its a nasty one IMHO.

Todd Glassey
> Nico
> -- 
> ------------------------------------------------------------------------
>
>
> No virus found in this incoming message.
> Checked by AVG - www.avg.com 
> Version: 8.5.392 / Virus Database: 270.13.25/2256 - Release Date: 07/23/09 06:02:00
>
>