Close
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Development
    • Development
    • Servers

    Open-Source Community Skeptical About Microsofts Sender ID License

    By
    Steven J. Vaughan-Nichols
    -
    August 25, 2004
    Share
    Facebook
    Twitter
    Linkedin

      Microsoft this month is moving forward with the developer implementation of its anti-spam Sender ID framework, but open-source advocates and mail vendors doubt whether the software giants new proposed license meets open-source requirements.

      Sender ID is a proposed IETF (Internet Engineering Task Force) e-mail standard that combines Microsofts earlier Caller ID proposal with SPF (Sender Policy Framework), which was developed by Meng Weng Wong, founder of IC Group Inc.s Pobox.com. Sender ID is meant to stop many spam, virus and phishing attacks before they are launched by inspecting e-mail at the SMTP level to ensure that messages are actually coming from real users at recognized mail domains.

      Sender ID has already gained market support. Both ISPs, such as AOL, and mail software and support companies, such as Cloudmark Inc. and Tumbleweed Communications Corp., have announced support for it. Microsoft has also announced that it will start using Sender ID for inbound e-mail to its hotmail.com, msn.com and microsoft.com domains in October.

      Despite this groundswell of commercial support, Microsofts licensing requirements are incompatible with many open-source licenses, according to experts. This, in turn, means that Sender ID couldnt be implemented in open-source mail applications.

      Richi Jennings, lead analyst for Ferris Research Inc., explained that Microsoft insists that anyone who implements the proposed standard “agree to their licensing requirements, since that standard will be in part based on their contributed IP.”

      He continued: “The license appears to be incompatible with usual open-source practice, for several reasons. The most important one is that it precludes the use of GPL [General Public License] open-source license styles for any implementation, because your IP rights are not transferable to people who take your code and modify it, [and] your IP rights can only be used to implement this standard, nothing else. So you cant study how it works and adapt it.”

      Lawrence Rosen, a partner in the law firm Rosenlaw & Einschlag and author of “Open Source Licensing: Software Freedom and Intellectual Property Law,” said he has “explained to Microsoft that their license is expressly incompatible with the warranty of provenance in the Academic Free License and the Open Software License.”

      Specifically, he said, “the nontransferable, non-sublicenseable language in their reciprocal patent license imposes an impossible administrative burden on the open-source development community and, in essence, creates additional downstream patent licenses that will be incompatible with the AFL/OSL and similar open-source licenses, and with the open-source development process.”

      Rosen added that some issues go beyond just open-source concerns. “The requirement that If you would like a license from Microsoft (e.g., rebrand, redistribute), you need to contact Microsoft directly gives Microsoft information about its competitors plans that it has no reason to know.”

      In addition, he said, “No open-source license—and all of them allow rebranding and distribution—can be conditioned on informing Microsoft of anything at all. Other proposed licenses have been rejected by OSI [Open Source Initiative] and FSF [Free Software Foundation] because they required licensees to notify the licensor of their intentions.”

      Next page: A compromise may be possible.

      Page Two

      Nevertheless, Rosen, on behalf of open-source developers, has been trying to get Microsoft to back down on these sticking points.

      “For the last few weeks I have been quietly negotiating changes to the Microsoft Sender ID Patent License Agreement with the responsible attorney at Microsoft. I have kept Eben [Moglen, the FSFs general counsel] and several members of the IETF working group fully informed as those discussions proceeded. It has been a difficult chore because Microsoft objects to several of the important changes I asked for that could transform this into an open-source-compatible patent license,” he said.

      “The absence of sublicensing is but one of the important concerns Ive raised with them. There are other parts of this agreement that would make it unacceptable if it were part of an open-source license although, in fairness, I should say that it is a far better license than Microsoft has ever offered before.”

      Microsoft has made some changes to its license as per Rosens and other open-source advocates suggestions, but on the major issue of sublicensing, the company has remained firm.

      That said, Microsoft might be willing to compromise on this issue in future versions of the license, according to Microsoft sources. Microsoft badly wants its patent accepted as part of an IETF standard. To do that, it may be necessary to compromise on the sublicensing issue.

      /zimages/6/28571.gif Click here to find out why Security Center Editor Larry Seltzer thinks Microsoft should put up or shut up on this issue.

      Eric Allman, chief technology officer for Sendmail Inc., a leading mail server company, said, “In our discussions with Microsoft we were able to get them to make some improvements, at least to the point of making it clear that end users didnt have to execute a license with Microsoft.”

      Allman added, “The fact that redistributors still do is a problem, and will probably prevent us from bundling Sender ID with Sendmail.”

      As a result, Jennings noted, “if people implement Sender ID with the license as it stands, there will be an unreasonable amount of friction. It will therefore risk not reaching critical mass. If Sendmail doesnt implement Sender ID directly in its MTA [Mail Transfer Agent], its inevitable that Sender ID wont get used as widely as it would otherwise.”

      In addition, he said that since “Microsoft has failed to meet the IETFs deadline for full disclosure of the licensing terms and applicable patent details, the momentum of opinion seems to be that Microsofts IP will be dropped from the standard, meaning that the IETF will standardize on a tweaked version of the original SPF proposal.”

      Allman also isnt optimistic about Microsoft making Sender ID open-source friendly. “Its pretty clear that its going to take an act of whatever deity Microsoft worships in order to get them to back down on the sublicensing issue. They made it absolutely clear to us that they were not even going to consider changing this, and the legal folks made it further clear that they would rather see Sender ID die than back down.”

      Still, there are efforts still afoot within both Microsoft and the open-source community to make Sender ID acceptable to the IETF and the open-source community, so its possible that Microsoft may yet change its Sender ID licensing requirements.

      Microsoft did not respond to requests for comment.

      /zimages/6/28571.gifCheck out eWEEK.coms Linux & Open Source Center for the latest open-source news, reviews and analysis.

      /zimages/6/77042.gif

      Be sure to add our eWEEK.com Linux news feed to your RSS newsreader or My Yahoo page

      Steven J. Vaughan-Nichols
      I'm editor-at-large for Ziff Davis Enterprise. That's a fancy title that means I write about whatever topic strikes my fancy or needs written about across the Ziff Davis Enterprise family of publications. You'll find most of my stories in Linux-Watch, DesktopLinux and eWEEK. Prior to becoming a technology journalist, I worked at NASA and the Department of Defense on numerous major technological projects.

      MOST POPULAR ARTICLES

      Big Data and Analytics

      Alteryx’s Suresh Vittal on the Democratization of...

      James Maguire - May 31, 2022 0
      I spoke with Suresh Vittal, Chief Product Officer at Alteryx, about the industry mega-shift toward making data analytics tools accessible to a company’s complete...
      Read more
      Cybersecurity

      Visa’s Michael Jabbara on Cybersecurity and Digital...

      James Maguire - May 17, 2022 0
      I spoke with Michael Jabbara, VP and Global Head of Fraud Services at Visa, about the cybersecurity technology used to ensure the safe transfer...
      Read more
      Applications

      Cisco’s Thimaya Subaiya on Customer Experience in...

      James Maguire - May 10, 2022 0
      I spoke with Thimaya Subaiya, SVP and GM of Global Customer Experience at Cisco, about the factors that create good customer experience – and...
      Read more
      Cloud

      IGEL CEO Jed Ayres on Edge and...

      James Maguire - June 14, 2022 0
      I spoke with Jed Ayres, CEO of IGEL, about the endpoint sector, and an open source OS for the cloud; we also spoke about...
      Read more
      Big Data and Analytics

      GoodData CEO Roman Stanek on Business Intelligence...

      James Maguire - May 4, 2022 0
      I spoke with Roman Stanek, CEO of GoodData, about business intelligence, data as a service, and the frustration that many executives have with data...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2022 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×