apr-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Tollef Fog Heen <tfh...@err.no>
Subject Re: MD4/MD5 implementation is non-free
Date Mon, 16 Oct 2006 20:07:45 GMT
* "Roy T. Fielding" 

| On Oct 16, 2006, at 3:38 AM, Joe Orton wrote:
| 
| > An argument has been made that the third-party MD4/MD5 code in APR
| > (specifically, APR-util) is licensed such that it is not
| > permissible to distribute modified works.
| 
| AIUI, copyright law has separate restrictions on "to make ...
| derivative works" from the restrictions on reproducing works, and
| thus the text is merely reflecting each of the permissions needed
| in turn.  In other words, if you have a license to copy and a license
| to make derivative works, then you have a license to redistribute
| the derivative works as well, since the derivative work is
| covered either by the original's license-to-copy or by the new
| copyright of the entity that created the derivative work.

IANAL, but that's not how Debian interprets licences.  You don't have
any rights not explicitly granted, and a right to make derivative
works and a right to distribute the software does not give you the
right of distributing derivative works.

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=340538 is the
original bug report.

Note also that even if copyright law works that way in jurisdictions
you are familiar with, there's no guarantee it works that way in every
jurisdiction.  Better safe than sorry.  IMO, at least.

-- 
Tollef Fog Heen                                                        ,''`.
UNIX is user friendly, it's just picky about who its friends are      : :' :
                                                                      `. `' 
                                                                        `-  

Mime
View raw message