Gentoo Archives: gentoo-project

From: Rich Freeman <rich0@g.o>
To: gentoo-project <gentoo-project@l.g.o>
Subject: Re: [gentoo-project] [RFC] GLEP 76: Copyright Policy [v4]
Date: Thu, 27 Sep 2018 13:43:24
Message-Id: CAGfcS_=ftzU-YbVXRf86G1a8oY_mxrCi86Mf=V2-=S6hAFzP1w@mail.gmail.com
In Reply to: Re: [gentoo-project] [RFC] GLEP 76: Copyright Policy [v4] by kuzetsa
1 On Thu, Sep 27, 2018 at 9:08 AM kuzetsa <kuzetsa@×××××.com> wrote:
2 >
3 > in this case, the GCO (or the DCO from which it borrowed it's ideas)
4 > should explicitly state its purposes, rather than relying on the
5 > assumption that a person can be tracked down if the license was is ever
6 > in doubt.
7
8 While I'm all for having background, I don't see how it actually
9 changes the situation.
10
11 Also, there is no need to track people down, ever. The purpose of the
12 GCO/DCO is to make the contributor liable for their contributions, and
13 this is already accomplished. If the true copyright holder wants to
14 try to track them down that is their problem.
15
16 If somebody provides us evidence that they are the true copyright
17 holder and ask us to remove their code, we simply have to remove their
18 code. No stack of licenses/certificates/attestations/etc will ever
19 change that.
20
21 It is like buying a house. If you buy a house from somebody, and it
22 later turns out that they never owned the house, then the owner is
23 going to be able to take his house back from you free of charge. It
24 doesn't matter how many documents the "seller" signed in the process -
25 it was never their house to sell. However, those documents CAN place
26 some liability on them for such things, or provide you with due
27 diligence / reasonable care so that it shows that you acted in good
28 faith and the owner won't go after you beyond just getting back their
29 house. You're still out the house either way.
30
31 I believe this is the basic principle behind these kinds of documents.
32 It is basically an affirmation of compliance, which is a form of
33 showing reasonable care on the part of the recipient.
34
35 >
36 > people can and do physically relocate from time to time, and if they're
37 > no longer a contributor there's no way to track them down, should the
38 > need arise for any legal or ethical questions (the kind of purpose which
39 > the policy makes no mention of: a way to reach the contributor)
40 >
41
42 See above. Tracking down the contributor is unlikely to really get us
43 far, and it really makes no sense. The purpose of the DCO is to
44 collect the affirmation of compliance up-front so that we don't have
45 to try to get it later. It doesn't change who owns copyright. If it
46 turns out somebody lied to us then bad things will always happen, but
47 they just won't be as bad as they could have been.
48
49 --
50 Rich

Replies

Subject Author
Re: [gentoo-project] [RFC] GLEP 76: Copyright Policy [v4] kuzetsa <kuzetsa@×××××.com>