Debian Bug report logs - #495721
ftp.debian.org: Is AGPLv3 DFSG-free?

Package: ftp.debian.org; Maintainer for ftp.debian.org is Debian FTP Master <ftpmaster@ftp-master.debian.org>;

Reported by: Miriam Ruiz <little_miry@yahoo.es>

Date: Wed, 20 Aug 2008 00:21:01 UTC

Severity: wishlist

Done: Joerg Jaspert <joerg@debian.org>

Bug is archived. No further changes may be made.

Full log


Message #17 received at 495721-done@bugs.debian.org (full text, mbox):

Received: (at 495721-done) by bugs.debian.org; 28 Nov 2008 11:42:22 +0000
From joerg@debian.org Fri Nov 28 11:42:22 2008
X-Spam-Checker-Version: SpamAssassin 3.2.3-bugs.debian.org_2005_01_02
	(2007-08-08) on rietz.debian.org
X-Spam-Level: 
X-Spam-Bayes: score:0.0000 Tokens: new, 25; hammy, 148; neutral, 176; spammy,
	3. spammytokens:1.000-2--contaminate, 0.993-1--Offering, 0.985-+--million
	hammytokens:0.000-+--H*M:fsf, 0.000-+--H*UA:Emacs, 0.000-+--H*UA:Gnus,
	0.000-+--H*u:Gnus, 0.000-+--H*u:linux
X-Spam-Status: No, score=-8.6 required=4.0 tests=AWL,BAYES_00,FOURLA,
	FROMDEVELOPER,RCVD_IN_DNSWL_MED autolearn=ham
	version=3.2.3-bugs.debian.org_2005_01_02
Return-path: <joerg@debian.org>
Received: from vir.ganneff.de ([78.46.40.15])
	by rietz.debian.org with esmtp (Exim 4.63)
	(envelope-from <joerg@debian.org>)
	id 1L61jp-0008EK-AF; Fri, 28 Nov 2008 11:42:21 +0000
Received: from delenn.ganneff.de (unknown [172.20.10.9])
	by vir.ganneff.de (Postfix) with ESMTP id 049DD3805C;
	Fri, 28 Nov 2008 12:42:19 +0100 (CET)
Received: from delenn (localhost [127.0.0.1])
	by delenn.ganneff.de (Postfix) with ESMTP id 6A50156780;
	Fri, 28 Nov 2008 12:42:18 +0100 (CET)
From: Joerg Jaspert <joerg@debian.org>
To: 495721-done@bugs.debian.org
Cc: 506402-done@bugs.debian.org, debian-legal@lists.debian.org
Subject: AGPL and Debian
Organization: Goliath-BBS
User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/23.0.60 (gnu/linux)
X-GPG-ID: 0x7E7B8AC9
X-GPG-FP: DF7D EB2F DB28 FD2B A9FB  FA6D 715E D6A0 7E7B 8AC9
X-message-flag: Formating hard disk. please wait...   10%...   20%...
Mail-Followup-To: 495721-done@bugs.debian.org, 506402-done@bugs.debian.org,
	debian-legal@lists.debian.org
Date: Fri, 28 Nov 2008 12:42:09 +0100
Message-ID: <87k5aovzzi.fsf@delenn.ganneff.de>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
	micalg=pgp-sha1; protocol="application/pgp-signature"
[Message part 1 (text/plain, inline)]
Hi,

recently we, your mostly friendly Ftpmaster and -team, have been asked
about an opinion about the AGPL in Debian.

The short summary is: We think that works licensed under the AGPL can
go into main. (Provided they don't have any other problems).

Reason:
The concerns people have expressed with regard to this license relate to
the only ยง in it which is different to the GPL:

|| 13. Remote Network Interaction; Use with the GNU General Public License.

Citing the three main concerns from Bug #495721:

> 1) It can might add a cost to the usage of the software that restricts
>    its usage.
[this is also raised in #506042]

We do not think that this is a severe enough problem to restrict the
freeness of a work licensed using the AGPL.
 - Offering a publically accessible network service already comes with a
   cost that might be hard to calculate. Think about DDOS attacks for
   example.

 - For practical matters the distribution costs via the internet are
   close to zero for free software. While bandwidth does cost money, and
   having a (say) 20MB app downloaded a million times would create a
   large cost, the license text reads "from a network server at no
   charge". This means it is not required to be your own server, so you
   can use any of the free services, like Alioth, Savannah, SourceForge,
   Launchpad or Google Code. While those are only there for Free
   Software - that is the case for AGPL applications.

Considering those points, the requirement to make the source available
does not seem to be one which restricts the usage of the software in any
way related to us and the DFSG.

> 2) It might forbid private usage of software that uses any kind of
>    network.

We do not see that it would forbid the private usage of the software. If
you use the software privately, the users of that software are a pretty
limited group. And as soon as they can reach your system to use the
software that means they are able to either download the source from your
private server or get a link to a download location on a machine
accessible to them.

Why might it forbid the private usage of software? Section 13 only
requires to offer the source to the users of your service. As such you
only need to give it to the limited user set your private usage has.

Also, we tend to agree with the FSFs opinion that a client does not need
to provide you access to the source of the servers it interacts with, see
http://www.fsf.org/licensing/licenses/gpl-faq.html#AGPLv3ServerAsUser

> 3) It might contaminate unrelated software.

We aren't sure that this is much different to the "normal" GPL. It is a
copyleft license after all. So unless someone declares the GPL non-free
thanks to that, we disagree with applying it to the AGPL.


In conclusion we will continue to access AGPL works into main subject to
the rest of the checks that we also normally perform.

-- 
bye, Joerg
Could you please add me to the mirrors@debian.org alias. I'm not receiving
enough spam.
  -- Andrew Pollock
[Message part 2 (application/pgp-signature, inline)]

Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Thu Apr 17 21:26:48 2014; Machine Name: beach.debian.org

Debian Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.