Linux.com

Feature: Security

Eben Moglen on Microsoft's Caller ID Patent License

By Joe Barr on February 26, 2004 (8:00:00 AM)

Share    Print    Comments   

Eben Moglen -- professor of law at Columbia Law School and General Counsel for the Free Software Foundation -- said this morning that Microsoft's new spam-thwarting plan, dubbed Caller ID for E-mail, appears to be encumbered with unclear and unnecessary patent license claims. Correction: After seeing additional text from the MS license today, Professor Moglen says it may prohibit use under the GPL.

For years, Microsoft has spurned the existing open standards (RFC2015 and RFC3156) which provide for "sender verification" through cryptographically signed messages. But growing concern over spam and viral plagues has reached the point that Microsoft felt it had to do something to combat them. That something is their Caller ID plan. That plan includes a license that states:
Microsoft believes that it has patent rights (patent(s) and/or pending applications(s)) (sic) that are necessary for you to license in order to make, sell, or distribute software programs that comply with one or more aspects of the Caller ID for E-mail Specification.

Microsoft and its Affiliates hereby grant you ("Licensee") a fully paid, royalty-free, non-exclusive, worldwide license under Microsoft's Necessary Claims to make, use, sell, offer to sell, import, and otherwise distribute Licensed Implementations, provided, Licensee, on behalf of itself and its Affiliates, hereby grants Microsoft and all other Specification Licensees, a reciprocal fully paid, royalty-free, non-exclusive, worldwide, nontransferable, non-sublicenseable, license under Necessary Claims of Licensee to make, use, sell, offer to sell, import, and otherwise distribute Licensed implementations.

Asked to comment by email this morning on whether or not that portion of the license would prohibit its use in GPL-licensed software, Eben Moglen said:
This license does not prohibit the use of licensed claims--if there are any--in GPL'd software.

That Microsoft asserts unspecified patent claims over something it is trying to make a de facto standard, however, should give pause. There is no reason whatever for adoption of a patent-encumbered protocol in this area. If Microsoft does indeed possess essential claims it should disclose what those claims are, so that the implementer community can decide how to define a standard that no one owns, even partially. If Microsoft refuses to disclose what essential claims it has, Caller-ID for E-Mail should be rejected in favor of SPF or another alternative.

Correction:

Professor Moglen contacted NewsForge later today and said that -- based on other text he was being shown from the license -- it may prohibit GPL'd implementation. My deepest apologies to our readers and to Professor Moglen for not including the following portions of the license in my initial query this morning:

If you distribute, license or sell a Licensed Implementation, this license is conditioned upon you requiring that the following notice be prominently displayed in all copies and derivative works of your source code and in copies of the documentation and licenses associated with your Licensed Implementation: "This product may incorporate intellectual property owned by Microsoft Corporation. If you would like a license from Microsoft, you need to contact Microsoft directly." By including the above notice in a Licensed Implementation, you will be deemed to have accepted the terms and conditions of this license. You are not licensed to distribute a Licensed Implementation under license terms and conditions that prohibit the terms and conditions of this license.

Professor Moglen added these comments about the additional wording:

It's not the advertising clause, but the "deemed accepted." Under section 7 of the GPL, "conditions imposed" on the putative licensor that prevent him from passing to all others the freedoms conveyed by GPL preclude his distribution under GPL. If the license offered by Microsoft didn't require acceptance, then there would be no "conditions imposed" on a developer who didn't *actually* accept the license. But Microsoft here says that if you distribute you are deemed to have accepted (they are using the GPL's own approach against it). Whether that works the same way in patent terms that it works in copyright terms is not entirely certain, but the question is too close to permit doubtful developers to proceed. I would not hold that this license, containing both additional restrictions and an implicit or constructive acceptance clause is consistent with GPL section 7, hence the license effectively ousts GPL'd implementation.

Note, however, that a developer could specifically *disclaim* the Microsoft patent license, which--since it does not actually identify any patent claims being licensed--could be said to be a nullity in any event. Such a developer could legitimately distribute under GPL, which would arguably be the wiser course.

Share    Print    Comments   

Comments

on Eben Moglen on Microsoft's Caller ID Patent License

Note: Comments are owned by the poster. We are not responsible for their content.

enough said

Posted by: Anonymous Coward on February 27, 2004 12:56 AM
I am sick of Microsoft trying to set the standards that suit them and make them the most money.

All they are trying to do is lock people in so they have to buy their crap.

They still don't get what open standards are. I guess they are open as long as you pay them to open them.

What a joke.

#

Re:enough said

Posted by: Anonymous Coward on February 27, 2004 02:24 AM
Microsoft understands well what open standards are. But they are, and have always been, a corporation dedicated to maximizing their revenue and profits. If they create their own standard, and implement them, and roll it out on their systems (OE, IE, Windows), they stand to make a profit. It's abuse of their monopoly. And with the open-source world as fragmented as it is, it's not hard to see why they are winning. Don't kid yourselves here, the DOJ, the European Commission and the Japanese are going to do nothing to stop Microsoft. The Open-Source community has to work together to build a system which is a viable alternative, rather than bits and pieces.

#

Playing devil's advocate here

Posted by: The Spoonman on February 27, 2004 03:47 AM
But, let's face it, what have open standards gotten us in terms of e-mail? Larger penises? More women? Nigerian riches beyond our compare? Someone needs to change the standards and give a better solution. Microsoft is at least moving forward while the open source community (which claims lightning-fast solutions to problems) is still quibbling on how best to capitalize the word spam (SPAM? Spam? spam?)

#

Re:Playing devil's advocate here

Posted by: Anonymous Coward on February 27, 2004 04:44 AM
The thing about open standards is that they have to be supported by all. If Microsoft abuses its monopoly, and decides not to support it, the standard is redundant.

#

Re:Playing devil's advocate here

Posted by: Anonymous Coward on February 27, 2004 09:50 AM
> Microsoft is at least moving forward<nobr> <wbr></nobr>...

Microsoft is playing their same old game: seeing a useful idea that somebody else has come up with, recoding it in a manner that maximizes the benefit to them whilst making it expensive, difficult or impossible for anyone not using their software to interoperate with, and then publicising the hell out of "their innovation" that will "benefit everyone" and "Improve your Computing Experience" {gag}.

"Caller ID" is nothing more than SPF bloated by XML.

See http://spf.pobox.com/ for what MS is trying to embrace and extend today.

#

Re:Playing devil's advocate here

Posted by: flacco on February 27, 2004 01:25 PM
what have open standards gotten us in terms of e-mail? Larger penises? More women? Nigerian riches beyond our compare?


how about hundreds of interoperating F/free software packages that make use of TRUE standards that aren't encumbered by patents?

#

Re:Playing devil's advocate here

Posted by: Joe Barr on February 28, 2004 01:46 AM

You can blame Microsoft's refusal to adopt RFC 2015 and RFC 3156 for all the items you're trying to lay at the feet of open standards.


You might notice that they both provide sender verification, which is at the heart of Microsoft's Caller ID scheme. But they chose not to adopt proven, working, open, interoperable standards.


Gosh, I wonder why.

#

How simplistic!!

Posted by: andrecaldas on February 28, 2004 08:35 PM

My friend advocate,

I am really amazed on how simplistic you were
able to be in your statements about spam mails.

"But, let's face it, what have open standards gotten us in terms of e-mail? Larger penises? More women?"

It seems that your only problem is that
you don't know who you should blame<nobr> <wbr></nobr>:-)

Do you really think that the problem was not
solved until now because everybody is just
incompetent? Do you think that it was lack of
technology, and that GOD(M$) suddently decided
to help us and we should be thankful?

Well, when you talk about standards
you mean something that is common to all.
Different applications should "speak the same
language". Creating standards is not only a
matter of finding a solution to a certain
problem. The solution already exists, but it
is useless if it does not become standard.

Why would you prefere an standard owned
by M$ when you can have standards with no
owners?

This is not a matter of "intelectual
property" (patent in this case). M$ is trying
to gain patent rights not as a result of creative
work, but just - as always - using its dominant
position on the software market. If M$ patents
become standard, then you will probably have to
buy "stamps" from them just to KEEP YOUR RIGHT
TO USE A SERVICE M$ DOES NOT OWN.

#

Re:enough said

Posted by: Anonymous Coward on March 19, 2004 10:35 AM
Never mind.
There is allready Software available which supports both "Standards". NoSPAMProxy.

#

Microsoft Patenting Like Mad

Posted by: Anonymous Coward on February 27, 2004 02:33 AM
<A HREF="http://yro.slashdot.org/article.pl?sid=04/02/25/1346201&mode=thread" TITLE="slashdot.org">Microsoft Seeks Patent On Virtual Desktop Pager</a slashdot.org> with a link to the actual patent application filing <A HREF="http://appft1.uspto.gov/netacgi/nph-Parser?Sect1=PTO1&Sect2=HITOFF&d=PG01&p=1&u=%2Fnetahtml%2FPTO%2Fsrchnum.html&r=1&f=G&l=50&s1=%2220030189597%22.PGNR.&OS=DN/20030189597&RS=DN/20030189597" TITLE="uspto.gov">here</a uspto.gov>.

Given the USPTO's track record at issuing software patents, chances are this and other future patent filings by microsoft will get issued.

#

Umm ...

Posted by: David Breakey on February 27, 2004 05:47 AM

Somebody please correct me if I'm wrong, but after reading these documents, it looks like this Caller ID for e-mail proposal is little more than an enhanced version of SPF. So which came first?

#

SPF was first

Posted by: Anonymous Coward on March 22, 2004 01:42 AM
Hi,
CallerID is NOT an advanced version of SPF.
SPF has by far much more features and functionalities and even was much earlier available.
Anyway - for me as a user it does not make a difference. My Provider is using NoSPAMProxy which supports both SPF and CallerID so I dont really have that problem.
As for my private Domains for me its very easy to publish the TXT record required for SPF but its IMPOSSIBLE to publish the CallerID _ep Record since you need to be able to create a subdomain in your DNS....
My 10 Cents
Volker

#

Re:SPF was first

Posted by: Anonymous Coward on April 07, 2004 09:02 AM
Thanks for your hint on Nospamproxy. Its really great. But they dont state prices<nobr> <wbr></nobr>:-(

#

This story has been archived. Comments can no longer be posted.



 
Tableless layout Validate XHTML 1.0 Strict Validate CSS Powered by Xaraya