{"id":580,"date":"2006-09-14T10:07:39","date_gmt":"2006-09-14T18:07:39","guid":{"rendered":"\/?p=580"},"modified":"2006-09-14T10:13:06","modified_gmt":"2006-09-14T18:13:06","slug":"ben-laurie-responds-to-osp","status":"publish","type":"post","link":"https:\/\/www.identityblog.com\/?p=580","title":{"rendered":"Ben Laurie responds to OSP"},"content":{"rendered":"<p>Ben Laurie, a major contibutor to internet security through&nbsp;his work at Apache, and now at Google,&nbsp;is generally positive about OSP but has questions:&nbsp;<\/p>\n<blockquote><p>&#8220;Kim Cameron <a href=\"\/?p=574\"><font color=\"#003399\">announced that Microsoft are making it possible for anyone to implement Infocard-compatible systems<\/font><\/a> (and other systems the depend on the same protocols), via the <a href=\"http:\/\/www.microsoft.com\/interop\/osp\/\" class=\"broken_link\"><font color=\"#003399\">Open Specification Promise<\/font><\/a>.<\/p>\n<p>&#8220;First off, let me say that this is a huge step forward &#8211; there\u00e2\u20ac\u2122s been a great deal of uncertainty around WS-* and friends because of the various patents various companies own. Microsoft taking this step definitely helps.<\/p>\n<p>&#8220;But, there are some details that worry me &#8211; firstly I am curious why Microsoft have taken the approach of this promise rather than an explicit licence. I\u00e2\u20ac\u2122ve talked to various lawyers about it, and the general feeling I get is that they\u00e2\u20ac\u2122d be more comfortable with a licence, but they can\u00e2\u20ac\u2122t point to anything obviously wrong with the promise approach.&#8221;<\/p><\/blockquote>\n<p>So I need to make it absolutely clear that if anyone feels more comfortable with a RANDZ (Reasonable and Non-Discriminatory Zero Royalty) License rather than the Open Specification Promise, Microsoft will be happy to provide them with one.&nbsp;&nbsp;The goal was simply to provide a simple, clear alternative for those who wanted one.&nbsp; Ben continues:<\/p>\n<blockquote><p>&#8220;Secondly, there\u00e2\u20ac\u2122s this definition:<\/p>\n<div style=\"margin-left: 30px\">\u00e2\u20ac\u0153&#8217;Microsoft Necessary Claims&#8217; are those claims of Microsoft-owned or Microsoft-controlled patents that are necessary to implement <em>only the required portions<\/em> of the Covered Specification that are <em>described in detail<\/em> and not <em>merely referenced<\/em> in such Specification. &#8216;Covered Specifications&#8217; are listed below.<\/div>\n<p>&#8220;(my italics). Now, I\u00e2\u20ac\u2122ve implemented a lot of software from protocol specifications, and there are two things that are extremely common:<\/p>\n<ul>\n<li>&#8220;The specifications include many optional parts. These parts will not be covered by Microsoft\u00e2\u20ac\u2122s promise.<\/li>\n<li>&#8220;The specifications reference other specifications for vital parts of their implementation. These parts will not be covered by Microsoft\u00e2\u20ac\u2122s promise.<\/li>\n<\/ul>\n<p>&#8220;Now, exactly what affect these considerations have on Microsoft\u00e2\u20ac\u2122s promise and implementations of WS-* et al is something I have not had the time or energy to assess &#8211; perhaps others with more intimate knowledge of the specs could help me out there? I\u00e2\u20ac\u2122d love to hear that, in fact, this is a non-problem.&#8221;<\/p><\/blockquote>\n<p>It may help to&nbsp;recall what Standards Guru&nbsp;<a href=\"http:\/\/www.consortiuminfo.org\/standardsblog\/article.php?story=20060912140103877\" class=\"broken_link\">Andy Updegrove says<\/a> about the phrase &#8220;\u00e2\u20ac\u00a6that are described in detail and not merely referenced in such Specification\u00e2\u20ac\u00a6.&#8221;:<\/p>\n<blockquote><p>&#8220;While not usually phrased in this fashion, this is a common limitation intended to clarify that, for example, other standards that may be referenced, or so-called \u00e2\u20ac\u0153enabling technologies,\u00e2\u20ac\u009d the use of which would be required to use an implementation (e.g., the computer upon which the software is running) are not included.&#8221;<\/p><\/blockquote>\n<p>But I do understand Ben&#39;s question about the required versus optional parts of a specification and will ask our legal people to clarify.&nbsp;<\/p>\n<p>Ben&#39;s next point:<\/p>\n<blockquote><p>&#8220;Another factor to consider is that (as I understand it) Microsoft are not the only people with IP around these standards. Will everyone else be so generous with their IP? Microsoft don\u00e2\u20ac\u2122t care, of course, because they have the usual patent mutually assured destruction &#8211; but those of us with smaller patent portfolios are not so fortunate.&#8221;<\/p>\n<p>So, as always, I guess I\u00e2\u20ac\u2122m an optimistic cynic.<\/p><\/blockquote>\n<blockquote><p>Incidentally, another thing Kim has talked about several times is Microsoft allowing exact copies of their user interface. I\u00e2\u20ac\u2122m in two minds whether its a good idea to copy it, but this promise doesn\u00e2\u20ac\u2122t cover the UI, as far as I can see. I wonder when that piece will be forthcoming?<\/p><\/blockquote>\n<p>I really want to make it clear that I have never suggested I would ask Microsoft to allow people to make &#8220;exact copies&#8221; of our user interface.&nbsp; And in fact, no one has ever asked to be able to do this.<\/p>\n<p>What we want to be able to do is create a &#8220;ceremony&#8221; that is recognizable across platforms.&nbsp; I&#39;m talking about the equivalent of using a steering wheel and brakes in a car.&nbsp; All cars have them, so even if we like a particular type of car, we can get in another one and drive it.&nbsp; This doesn&#39;t mean the cars are &#8220;exact copies&#8221; of each other, or even that the steering wheel and brakes look or feel identical.&nbsp;<\/p>\n<p>As Novell&#39;s Dale Olds put it at DIDW, we are talking about sharing a predictable sequence of experiences, not cloned screens.&nbsp; So in this sense, I think everyone shares Ben&#39;s &#8220;two-minds&#8221; thinking.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>There\u00e2\u20ac\u2122s been a great deal of uncertainty around WS-* and friends because of the patents various companies own. Microsoft taking this step definitely helps.<\/p>\n","protected":false},"author":68,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[16,2,15,18],"tags":[],"_links":{"self":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/580"}],"collection":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/users\/68"}],"replies":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=580"}],"version-history":[{"count":0,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/580\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=580"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=580"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=580"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}