4 ms·

According to https://twitter.com/moxie/status/730289041493483520 https://twitter.com/moxie/status/730289041493483520 Moxie is fine with reimplementations.

by cm3 10y ago

cm3 10y ago
Unfortunately, if I read https://news.ycombinator.com/item?id=11727870 https://news.ycombinator.com/item?id=11727870 right, Moxie formulated that more clearly by saying they would only approve of copyleft reimplementations. Unless I'm misreading things, this confirms the concerns and turns it more into something like the Java conformance testing case which the Apache folks ran into. I do get why they want protocol conformance, but expecting everyone to publish their implementation as copyleft is unreasonable and unrealistic. The only acceptable solution, if they want to see widespread use of the protocol, is to have a shared, no strings attached testing framework everyone can use to check their protocol implementation doesn't deviate. We have such things for web standards, why not for a secure chat solution? Their aim is good, but the solution is unacceptable for an industry standard to be. Quoting If you'd like to do the work of developing a strong copyleft version of the GPL that you feel is appropriate for use in the app store, and get it OSI approved, we'd certainly look at using that. We'd like to get this better documented [...] It's a priority [...] hopefully we'll have more to publish this year. We haven't patented any of the concepts here, and we've done a lot to explain and popularize them. We're happy for people to use these concepts to build their own implementations of similar protocols, but we don't want people slapping things together and calling that Signal Protocol.
akerro 10y ago
But he's not happy with recompilation of Signal? https://fdroid.eutopia.cz/ https://fdroid.eutopia.cz/ > Any other distribution channel we be treated as malware
- Arnt 10y ago
  He isn't fine with anyone distributing unsigned or resigned Signal. What he says is more or less "my app, my signature". The fdroid people could recompile, check that the binary matches the one Moxie signed, and distribute the one with Moxie's signature.

According to https://twitter.com/moxie/status/730289041493483520 https://twitter.com/moxie/status/730289041493483520 Moxie is fine with reimplementations.

by cm3 10y ago

According to https://twitter.com/moxie/status/730289041493483520 https://twitter.com/moxie/status/730289041493483520 Moxie is fine with reimplementations.

cm3 10y ago

Unfortunately, if I read https://news.ycombinator.com/item?id=11727870 https://news.ycombinator.com/item?id=11727870 right, Moxie formulated that more clearly by saying they would only approve of copyleft reimplementations. Unless I'm misreading things, this confirms the concerns and turns it more into something like the Java conformance testing case which the Apache folks ran into. I do get why they want protocol conformance, but expecting everyone to publish their implementation as copyleft is unreasonable and unrealistic. The only acceptable solution, if they want to see widespread use of the protocol, is to have a shared, no strings attached testing framework everyone can use to check their protocol implementation doesn't deviate. We have such things for web standards, why not for a secure chat solution? Their aim is good, but the solution is unacceptable for an industry standard to be. Quoting If you'd like to do the work of developing a strong copyleft version of the GPL that you feel is appropriate for use in the app store, and get it OSI approved, we'd certainly look at using that. We'd like to get this better documented [...] It's a priority [...] hopefully we'll have more to publish this year. We haven't patented any of the concepts here, and we've done a lot to explain and popularize them. We're happy for people to use these concepts to build their own implementations of similar protocols, but we don't want people slapping things together and calling that Signal Protocol.

akerro 10y ago

But he's not happy with recompilation of Signal? https://fdroid.eutopia.cz/ https://fdroid.eutopia.cz/ > Any other distribution channel we be treated as malware

Arnt 10y ago
He isn't fine with anyone distributing unsigned or resigned Signal. What he says is more or less "my app, my signature". The fdroid people could recompile, check that the binary matches the one Moxie signed, and distribute the one with Moxie's signature.