Hi,
Adding the Trustees.
Speaking as one of the Trustees but not necessarily for the IETF Trust, I don't
think the IETF Trust has anything to do here. The IETF may.
What I write INLINE below is written as an analysis of the situation from an
IETF Trustees viewpoint, and a legalistic viewpoint at that. To summarize the
many letters down there, I believe nothing legally wrong happened, and the
trust has nothing to do in this case or towards similar cases.
Taking off my Trustee hat and getting into the shoes of someone who has spent
time and energy writing something up, just to watch his name to disappear, I
don't believe what happened was "right" even if it was legal. The problem is
not copyright law or copyright notices, the problem is proper attribution of
work that was performed by someone else. Remedies are obviously available,
circling around proper attribution of substantially all the -00 text to Mukund
and the other authors of the initial text. In the order of cleanliness:
1. The perhaps cleanest way would be to follow most SDO policies and remove any
attribution to individuals. However, that's not going to fly here in the IETF.
2. The IETF, in my opinion unwisely, decided a long time ago to limit the
number of listed authors to five, relying on "editors" in the authors' field of
the I/D/RFC front page and an contributors/acknowledgement section. That's
neither fish nor meat when it comes to proper attribution, as many folks, often
from the academic field, have complained before. Changing this policy back to
where it was before 2000 (where an I-D or RFC could have as many listed authors
as appropriate from a contributing viewpoint) may be the cleanest way forward
without boiling the ocean, even if in some cases the first page of an RFC would
basically be an author's list. However, that's a policy change that would take
time to make. Also, the original arguments for limiting the number of listed
authors on the front page are still around, hence the fate of such a proposal
would be unclear. In any case, we have a real problem NOW, which (I guess)
cannot wait for IETF policy work.
3. I believe that the I-D and RFC editors can make exceptions from the
five-listed-author policy in justified cases. Given the controversy at hand,
this may well be such a justified case. One justification is Mukund's
justified (I believe) complaint. The other is that if his allegations are
correct, the copyright notice we have today may be unusable for its intended
purpose.
4. As a last resort, many I-Ds and RFCs include an acknowledgement section,
which is free form. Proper acknowledgement to the predecessor draft and its
authors (including calling them authors and not contributors or something),
would IMO make the copyright notice stick to them. Whether that's also an
adequate attribution, and remedy form Mukund's et. al. viewpoint is, of course,
for them to decide.
Mukund seems to be aware of most or all of these options, and I hope that a
pragmatic way out here will be ultimately found.
Assuming Mukund's claim that he and his original co-authors indeed have
authored most of the text in question and hence may own the copyright (I
haven't verified that but have no reason to doubt it either, based on the email
conversation), the current copyright message would likely be rejected by the US
copyright office if we were trying to register the copyright, which in practice
is a requirement before enforcing the copyright. Insofar, I would recommend
that the eth current authors and/or the WG take action, preferably using
mechanism 3) above, or if the pushback is too bad, mechanism 4.
I kicked around the idea of a change in the boilerplate that could adequately
address this problem (as suggested by Brian) but couldn't come up with one that
would work. If interested, please see inline below for details why I think
nothing was legally wrong, the Trust has nothing to do, and why I don't believe
a change to the boilerplate copyright notice can be made that addresses the
problem of non-listed authors.
Stephan
On 5/2/22, 07:04, "ietf on behalf of Brian E Carpenter" <ietf-boun...@ietf.org
on behalf of brian.e.carpen...@gmail.com> wrote:
[...]
> The copyright notice on the document says:
>
> Copyright (c) 2022 IETF Trust and the persons identified as the
> document authors. All rights reserved.
>
> By way of this, by removing the names of authors, isn't the copyright
> notice attributed to the (original) document authors also being removed?
I am not a lawyer, but I believe it's true that *nobody* can remove the
original authors' copyright (although the details might differ in each
country's laws).
That is my understanding as well. Beyond that, the IETF and IETF' Trust's
legal framework is designed such that authors retain full rights to their work,
with the exception of the license they grant to the IETF trust. That's by
design, and it's different from many other author/publisher relationships.
However, the point here is that when an IETF I-D is
submitted, it is done so under the IETF's conditions, including the
IETF's right to produce "derivative works". The details are in BCP98
(RFC5378) and in the IETF Trust's Legal Provisions, but basically it
means that the text can be re-used in future IETF drafts and RFCs.
Yes. To amplify: the IETF's legal framework is designed to allow anyone to
pick up abandoned work of others. Nothing wrong with that. What may have been
a mistake on the policy side was to rely on proper courtesy by the new authors,
under the assumption that everyone contributing here is of the same mindset of
what "proper courtesy" in such a case entails.
[...]
I wonder if the conventional sentence "Copyright (c) 2022 IETF Trust and
the persons identified as the document authors" needs to be tuned to
also cover previous authors when the authorship team for a draft changes?
But that question is for the IETF Trust and its lawyer.
The IETF Trust "owns" certain IPR, including the co-ownership of copyright of
I-Ds and RFCs. RFC5378 further delegates the authority to change copyright
notices to the IETF Trust. Insofar, Brian is correct that modifying the
copyright boilerplate would be for us to make. Speaking as one of the
Trustees, I would not want to address this problem though, mostly because the
IETF has adequate remedies to deal with the case at hand, and similar cases.
Mukund's real problem, as I perceive it, is not the copyright notice, it's the
lack of proper acknowledgement and attribution of his work. That's nothing a
boilerplate change can fix; it's an IETF culture thing and for the IETF to
address.
As Brian has correctly pointed out above, the original authors (including
Mukund) retain their rights under US copyright law, which is the governing law
when it comes to the IETF Trust. That's irrespective of the copyright notice,
even if the notice were not formed correctly. The copyright notice has certain
purposes, including preventing innocent infringement and pointing a possible
user of the copyright to the correct addressee(s) to obtain a license, as well
as establishing a date when the work was published. Its formalities are
checked by the copyright office only when registering the copyright, which in
turn is a common/necessary step before litigating a copyright claim.
Establishing, or enforcing copyright, or creating an equitable relationship
between multiple copyright holders, are NOT one of those purposes. Further
reading, for example, here: https://www.bitlaw.com/copyright/formalities.html
or, in more detail, here
https://www.copyright.gov/comp3/chap2200/ch2200-notice.pdf
By law, copyright notices include the copyright holder's names, or references
to those names such as our "persons identified as the document authors". See
2205.2(F) in the linked document above. In case of books and such, the
copyright notice typically does not list authors' names but rather the
publishing house, as the copyright was assigned by the authors to the
publishing house when they sold the book. The same is true for submissions to
most journals or conferences, where you see IEEE or ACM and such as the
copyright holder's name. In either case, it's easy to know where to go to
obtain a license, which is the key purpose of the copyright notice. For an
attribution to the individuals who wrote the book or paper, the copyright
notice is NOT the right place.
For self-published work, the copyright notice normally contains authors' names.
Again, it's presumably easy to know where to go to obtain a license. The same
is true for our boilerplate statement, as the IETF Trust is easily identifiable
and the "persons identified as document authors" are listed on the front page
and their contact information is part of the I-D or RFC. Insofar, the
copyright notice as we have it should be formed well and acceptable to the
office when registering the copyright.
We cannot sweep in all unnamed authors, be they unnamed by accidental omission
or by bad intent of a player, by a simple boilerplate change pointing towards
"all authors" or "all contributors" or something like that. It would go
contrary to the purpose of the copyright message, which is to provide a
potential user of the copyrighted material with a point of contact. Formally
speaking, it would go against 2205.2(F). As an example, in the current case,
it's too much to expect that anyone using wishing to obtain a license to be
aware of, and using, an IETF tool like the datatracker to hunt down Mukund's
coordinates, and/or doing research on expired drafts on who is owning the
original text, and all that in a hundred years from now (which is how long
copyright can easily be enforceable--lifetime of author plus 70 years.)
[...]
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop
