GPL v3, the Q&A: part 1- the license

Posted on by Luis Villa

Copyleft Icon

Q: So why are we here?
A: At the end of this week, after 16 years, the Free Software Foundation should bless version three of the GNU General Public License, the sequel to what is arguably the most widely used and most impactful copyright license ever.1 Quite literally everyone who makes software – open, proprietary, or web – needs to understand the v3 and figure out if it is evolutionary, revolutionary, or DOA, and how it impacts them as a potential contributor, consumer, cooperator or competitor. This is my small contribution towards that understanding.

Q: Can you summarize this Q&A in a haiku?
A:

new license rolls in
stormcloud- large, complex, strong, dense
scares, but should bring rain

(I really, really wanted to use “Snuffleupagus” in that, but sadly that doesn’t leave many syllables for imagery.)

Q: Why did you feel the need to summarize in haiku?

A: Because this was the longest blog post I’ve ever written. It is now going to be in (at least) four parts over three or four days, so you’ve been warned: you might want to leave off at the haiku :)

Q: Any disclaimers before you get rolling?

A: Tons. I am not a lawyer; whether I’m even a particularly good law student is still up in the air :) Don’t rely on this for legal advice.

I’ve based this commentary on the final discussion draft of the license; changes between now and the final, final version may invalidate some of my claims.

I’ve been on GPL Commitee A, so I’m predisposed to believe the FSF and SFLC’s interpretation of the license. On the flip side, I may not have learned much from that experience; mistakes are my own and may be plentiful.

Finally, I’m currently a Red Hat employee, but this is emphatically not a statement of Red Hat’s policy or interpretation of the license. No one at Red Hat has read this or commented on it beforehand, so again, mistakes are my own and may be plentiful.

Q: Why are we doing all this again? Isn’t GPL v2 reasonably good?

A: As I already mentioned, GPL v2 is almost certainly the most important and successful copyright license ever. By ensuring cooperation instead of competition, it has played a critical role in creating the large and thriving free/open source ecosystem. By providing a robust legal framework, it has provided predictability and protection for everyone who uses it. And by protecting the rights of users, it has done a fairly good job advancing the explicit goals of the authors of the license. So one has to consider it incredibly successful- especially considering that it is a legal document which most lawyers considered insane for a long time, and which still makes many uncomfortable.

That said, the license was written in 1991, and the computer industry has changed a lot since then. Patents have become a much more critical issue for the industry- in 1991, Microsoft had only just begun to understand how important patents would be to locking out new competitors. In 1991, the idea that computers would be the dominant form of media delivery would have been fairly ludicrous, much less the idea that software would be legally protected against “tampering.” And since 1991, the free and open source software community has gone from being a decent number of volunteers and one company, operating primarily on an informal basis, to being millions of volunteers and a multi-billion dollar industry, with all the legal structure, firepower, and infighting that implies. So an update was probably not a bad idea.2

Q: So what should a rewrite have done?
A: That is the million dollar question. While few people think of it that way, the FSF is a user-focused organization. GPL v2, to them, was about protecting the rights of users to control their own computing devices. The pragmatist camp sees GPL v2 as being about the rights of developers to progressively expand the commons and prevent bald-faced exploitation of their labor, a la Apple/BSD. These camps aren’t mutually exclusive- many of the license features which the FSF originally intended primarily to benefit users have been beneficial for developers, and obviously the thriving developer community is beneficial to users. But members of both communities often seem happy to trade away the rights of the other parties if there is a conflict.

Given that broad background, FSF’s specific goals for v3 were to protect user freedoms from ‘new’ threats like patents, DRM, and tivo-ization, while benefiting (or at least not alienating) developers. To the pragmatist camp, if there were to be changes, they needed to make life easier for developers- including not just individuals, but corporations. Since no one could think of any significant way to improve on the old license in that respect, they wanted to focus primarily on simplifying and strengthening what was already there.

Q: Given the success and the controversy of change, has the license really changed that much from v2 to v3?

A: The core goals, methods, and structures of v2 were successful and have been carried over with very few changes. If you use GPL code and do not redistribute it, you still get to do whatever you want with it. If you modify and redistribute GPL code, or build new applications on top of GPL-licensed libraries, you still have to release modifications and derivatives as GPL-licensed source. And you can can still build ‘immoral’ (aka, proprietary and/or DRM) code on top of the new LGPL. Some of the language has been changed enough that these goals may be hard to find in a casual read- but they are very much still there.

Q: What has changed, then?
A: A few major changes (note that some of these have been grossly oversimplified to be audience and scope appropriate; please don’t jump on me when I’ve not noted exceptions, loopholes, etc.) Note that I’ll have more on several of these over the next couple of days.

  • internationalization: the new license moves away from language like ‘derivative’ – which comes from US copyright law – in favor of language which does not exist in any system of copyright law. This is excellent in theory- it should make the license more politically palatable and legally enforceable outside the US. In practice no one can really know what courts will think of this until it is tested. 3
  • increased complexity: this tries to be a more lawyer-friendly document. It is not clear that it succeeded. Regardless of whether the lawyers like it, it is definitely less clear for hackers and executives on first glance, and that may slow uptake.4
  • patents, the straightforward part: the license attempts to create an explicit and irrevocable patent grant extending from all contributors to all users. If you contribute a substantive patch upstream5, you’re granting a patent license to the whole project. Merely distributing without copyrightable contribution, like IBM does with many GNU tools6 still does not grant a license. This should help create more certainty about the patents owned by our major contributors- the folks like Sun, Novell, etc. – but it doesn’t help against those who don’t contribute code, like Microsoft and patent trolls. So the impact is positive but limited.
  • patents, the complicated part: a lot of verbiage has been added in an attempt to prevent future blanket indemnifications like the Microsoft-Novell deal, and to ‘trick’ Microsoft into granting us their patents. I won’t go into these in much depth because I’m pretty sure they don’t buy us much – it looks like the Xandros and Linspire deals are already structured to avoid triggering these clauses, and there is no reason to believe that Novell and Microsoft can’t do the same. So net result here is probably that only the worst abuses of the old language, like the current Novell deal, are prevented. Not bad, but not the end of the Microsoft problem by any stretch.
  • user control: the new license tries to make it clear that users have the right to control their hardware and software. This takes two forms: first, it forbids a claim by distributors of GPL’d code that the code is part of an ‘effective technical protection measure’ and second, it explicitly guarantees that installation instructions (including all the necessary tools and keys) must be available so that users can modify their software and reinstall it on devices that they own. This language, while not always straightforward, should mean that consumer-level users of GPL v3 code should be able to reliably modify the GPL-licensed code on devices that they own.
  • license compatibility: the new license is compatible with the Apache Public License, so if you’re working on GPL v3 code, you should now be able to copy and paste from APL-licensed code. This does not mean that someone working on APL-licensed code can copy and paste from GPL v3 licensed code, though- compatibility with the GPL is always one way. (And the same applies to GPL v2 code- you can’t copy out of GPL v2 code, even into GPL v3 code.)

Q: So did the FSF reach their goals?

A: Since the FSF was in control of the process, the changes have focused on users rather than developers. Developers don’t necessarily fare poorly, but where there is choice between user freedoms and developer flexibility, the balance always tilts towards users. If, despite this, developers choose to use the license, it should give users and developers more certainty about patents, and it should ensure that users have the legal rights to control the devices that they own.7 Overall, then, a win for the FSF.

Q: Bottom line- in a year, what are we going to be saying about GPL?

A: Over the next few days I’ll explore the details of how developers and companies might feel about the new license, but I think the bottom line is that within a few years many will switch over. Communities who feel particularly threatened by patents, who badly want to draw from Apache, or who are particularly inclined to protect users and disregard possible costs to developers will adopt it particularly quickly. After that, adoption will slow for a while, but as users, developers, and corporates get comfortable, the various small improvements will gradually make it the default license for a plurality of new open source code, despite the understandable reservations (some well-grounded, some not) that many people currently feel.

[see all parts: part 1, part 2, part 3, part 4.]

  1. Microsoft’s licenses are possibly more widely used, but only by a handful of pieces of software; the various Creative Commons licenses are probably also more widely used but (for better or for worse) have not yet set billion dollar industries on their ear. Really, we owe to GPL the notion that a copyright license can actually be important at all. [↩]
  2. Novell’s decision to expose a real loophole in the patent language of the old license was only icing on the cake; the process was well underway before that happened. [↩]
  3. The Creative Commons lawyers think this approach is borderline insane, but their approach- one license per legal regime- drastically increases license fragmentation, which we know is a very real problem. [↩]
  4. Note that v2 isn’t nearly as clear as people would like to think- much of the supposed ‘clarity’ is really just the result of living with it and interpreting it for 16 years. [↩]
  5. not just any patch; it must be meaningful enough to be copyrightable [↩]
  6. edit later: IBM contributes to a number of GNU tools like gcc and classpath, I don’t mean to downplay that. Just that they also distribute the entire GNU user-space stack on AIX, which is the biggest example of ‘simple’ distribution that I know of. [↩]
  7. Of course, those new rights only help you if you’re also a hacker, or can afford to pay one to hack for you. But this was a problem with the v2 as well. [↩]

Published by Luis Villa

74 thoughts on “GPL v3, the Q&A: part 1- the license”

  1. License (an appropriately cynical reader would correctly point out that this would require swinging a dead cat at a fairly narrowly-focused RSS reader). I don’t really know a lot about the GPL, but here are a couple of resources which look useful: a post on Luis Villa’s blog

  2. y los guardo como oro en paño porque son como “el libro de pistas de la GPLv3″. Como “compartir es bueno” y más sobre un tema como éste, aquí tenéis los 4 artículos para vuestro goce y disfrute: GPL v3, the Q&A: part 1- the license GPL v3, the Q&A: part 2- developers GPL v3, the Q&A: part 3- companies GPL v3, the Q&A: part 4- odds and ends Después de echarle un vistazo… ¿qué os parece la nueva GPLv3? [IMG ;-)]

  3. A series currently in 4 parts focusing on the license itself, its impact to developers and companies. While not (yet) a lawyer (he’s currently taking up law), he was part of GPL Discussion Committee A. Luis has a disclaimer about these writings btw. Part 1 – The License Part 2 – The Developers Part 3 – Companies Part 4 – Odds and Ends In other news, not many people may have been aware of it, but Benjamin “Mako” Hill is now part of the FSF Board of Directors. I

  4. ‘license consultors’. I think we have made a good work in this last point, making upstream understand why he has to license properly his work so it can be safely distributed. For those interested, Luis Villa has written some articles about this issue 1. The License 2. Developers 3. Companies 4. Odds and ends A nice reading if you want to understand the key points of GPL v3. 10:01am

  6. Fun for the whole family! GNU GPLv3 Launch. And Luis Villa finished his 4-part GPLv3, The Q/A:[IMG] part 1 – the license part 2 – developers part 3 – companies part 4 – odds and ends Update: GNU-Linux Software License Revision Praised By SIFMA. Wow. Interesting move by the large financial and securities companies. It seems these large users do actually like Free

  7. Luis’s GPLv3 FAQ series was intense but a very good read. Iago’s first post on p.g.o made me discover Igalia’s GNOME Build Bot which is amazingly useful. It performs code coverage analysis for the test suite on all GNOME modules. Ashamed by

  8. to start to see some return fire from the Free software camp. And unfortunately for Novell, SUSE Linux is probably going to be the central battleground. GNU GENERAL PUBLIC LICENSE – gnu.org Microsoft Says It Is Not Bound by GPLv3 – via digg.com GPLv3, the Q&A – tieguy.org (4 parts here) Free Software Foundation Releases GPL 3 – news.zdnet.com

  10. Now that the final version of the GNU General Public Licence version 3 has been released, the in-depth analysis of its implications can begin. Two of the first commentaries to be published have come from the legal world, and there are doubtless many more being prepared for purely internal use within software companies wondering whether to adopt the new licence. But important as both the legal and commercial

  11. these sections of the code may not be perfect, but they should go a long way towards ensuring that users of your code always have the right to access it and modify it- something that wasn’t necessarily clear under the old license. You can findPart 1 of his serieson the blog. Remember: Luis = (developer + lots of open source experience). This doesn’t make him an expert, I guess, but it does make for informed writing.

  12. -Committee D comprised interested onlookers, programmers and licensing enthusiasts such as myself. I do not intend on providing a summary of GPLv3 – there are already a number of good summaries availablehere

  13. Luis,
    that would be awesome to get an explanation on how the “Microsoft agreements” won’t be prevented by the GPLv3. There is a lot of things on the internet claiming it would, so the explanation would help us, non lawyer (or law sudent) understand. :-) I know this is only part 1/4.

  17. Garrett: doh! I honestly had no idea; it keeps getting referred to as the APL. I’ll fix it in future postings.

  26. […] Complete Story Related Stories: Your Freedom Needs Free/Libre Software(Jun 27, 2007) GPLv2 or GPLv3?: Inside the Debate(Jun 19, 2007) GPL 3.0: The Questions We Should Be Asking(Jun 13, 2007) Why Microsoft Loves GPL 3.0: Changing Strategies(Jun 12, 2007) […]

  49. […] version 3 has been released, the in-depth analysis of its implications can begin. Two of the first commentaries to be published have come from the legal world, and there are doubtless many more […]

  50. […] that GPLv3 fixes Authored by: Anonymous on Sunday, July 15 2007 @ 02:56 AM EDT GPL 4 part Q&A Q: So why are we here? A: At the end of this week, after 16 years, the Free Software Foundation […]

Comments are closed.