7 ms·
I'm very outspoken against the GPL so take this comment with a grain of salt. > The AGPL is just an updated GPL. The AGPL is significantly more than an update
by the_mitsuhiko 10y ago
I'm very outspoken against the GPL so take this comment with a grain of salt.
> The AGPL is just an updated GPL.
The AGPL is significantly more than an updated GPL and there are loads of companies which have a blanket policy in place to not even get anywhere close to AGPL code because of the uncertainties about how it actually works.
> The AGPL is the very definition of "open source", because it defends openness.
Maybe it's the definition of free software but it's definitely not the definition of open source. Many of us in the open source community see our work as something that should be open for everybody to use.
- Flimm 10y agoIf we're going to sink our time into the old copyleft vs permissive licenses debate, I wish we would be more precise with our words. AGPL is an open source license, according to OSI, the only authority on what constitutes open source. https://opensource.org/licenses/AGPL-3.0 https://opensource.org/licenses/AGPL-3.0 You say "open for everybody to use". Both open source licenses and free/libre licences guarantee that the software is open for use. You're actually talking about freedom to combine with closed source/proprietary software, not about end-users freedom to use the software.
- throwaway91111 10y agoIf nobody uses a piece of software, its freedom is debatable. I don't know of anyone using agpl'd code to build software people use.
- SamReidHughes 10y agoYou never heard of anybody using MongoDB?
- dsp1234 10y agoNote that the official MongoDB C driver is Apache licensed, which is what most developers would make a derivative work from. https://github.com/mongodb/mongo-c-driver/blob/master/COPYING https://github.com/mongodb/mongo-c-driver/blob/master/COPYIN...
- SamReidHughes 10y agoRethinkDB's drivers are Apache licensed.
- the_mitsuhiko 10y agoFWIW that was part of the problem since that's a walking license violation go the AGPL by many interpretations. It's just that Mingo/Rethink violate their own license there. However any other client? Unclear.
- manarth 10y ago[they] violate their own license Careful with the word "violate": as a copyright holder, you cannot violate your own license. The copyright holder has intrinsic rights; licenses are permission to extend a subset of rights to third parties.
- darfs 10y agoI don't think that's even possible today, if you arent born on the Mars :-)
- the_mitsuhiko 10y agoThat's fine because Mongo is a company that plans on making money and holds the copyright. If it turns out AGPL is an issue they can relicense. The worry with RethinkDB was (at least mine and people I talked to) that it can become a liability if the AGPL turns out to be an issue since some third party owns the original copyright and then who knows what happens with future contributions.
- ralfn 10y agoYeah, that would be a great example of AGPL used to FORCE many parties to PAY for a non-AGPL license. For example, imagine Digital Ocean using MongoDB to store server configurations. AGPL would force them to open-source their whole infrastructure. All of it. Or pay to get a different license. I don't have a moral argument to make here -- just making sure people realize the actual trade-offs. AGPL is theoretically for a world where closed source software is simply not allowed to co-exist with opensource, even if you don't distribute it, but simply run it / host it / use it. But that world doesn't exist, so it does the opposite: it is actually used to make sure some of your users have to pay. It enables a business model.
- SamReidHughes 10y ago> AGPL would force them to open-source their whole infrastructure. All of it. Citation needed.
- jdelaney 10y ago> For example, imagine Digital Ocean using MongoDB to store server configurations. AGPL would force them to open-source their whole infrastructure. All of it. Or pay to get a different license. I don't think that's correct. From MongoDB the company[0]: > Note however that it is NOT required that applications using mongo be published. The copyleft applies only to the mongod and mongos database programs. This is why Mongo DB drivers are all licensed under an Apache license. You application, even though it talks to the database, is a separate program and “work”. [0] https://www.mongodb.com/blog/post/the-agpl https://www.mongodb.com/blog/post/the-agpl
- snuxoll 10y ago@ralfn > For example, imagine Digital Ocean using MongoDB to store server configurations. AGPL would force them to open-source their whole infrastructure. All of it. Or pay to get a different license. AGPL licenses aren't transitive, things that touch AGPL'ed software over the network aren't suddenly required to be AGPL licensed (otherwise the whole purpose of it would fall apart, since a large chunk of the initial design was for Free Software web-applications which could still be run in proprietary web browsers). AGPL means if you decide to fork a project and add new features, then sell it as a hosted service ala AWS/Azure then you also have to provide anyone that connects to it your modified source code. I'm actually debating using the license right now in a couple of projects I've been prototyping - I don't want to prevent people from being able to make money offering hosted services, but at the same time I don't want hostile SaaS forks that could rip off my work without contributing their changes back (I like the BSD license for libraries, but I'm starting to appreciate the GPL/AGPL more for applications for community-related reasons rather than free software righteousness).
- the_mitsuhiko 10y ago> AGPL licenses aren't transitive, things that touch AGPL'ed software over the network aren't suddenly required to be AGPL licensed (otherwise the whole purpose of it would fall apart, since a large chunk of the initial design was for Free Software web-applications which could still be run in proprietary web browsers). That is not necessarily true in the case of the database due to how the drivers work. This would need to be tested in court. It's unclear by the license terms alone.
- Drdrdrq 10y agoNote that MongoDB clarified their understanding of AGPL in no uncertain terms [0] so they would have trouble dragging someone who developed apps using their DB to court and demanding opensourcing of the app. Without such clarification from their side we would never have touched MongoDB. [0] https://www.mongodb.com/blog/post/the-agpl https://www.mongodb.com/blog/post/the-agpl
- 10y ago
- EGreg 10y agoWe rationally and happily chose AGPL for our platform. I advise everyone to do the same in my longer comment on this page. You can ask me why by replying to it.
- icebraining 10y agoVery large companies and governmental entities are using AGPL-licensed copies of OpenERP (now Odoo). In my experience, working for a company that provided services based on it, the license was never a problem.
- j-pb 10y agoWhat if the end user is a developer?
- EGreg 10y agoSee my comment below about that. The developer who wants to combine with closed source can contact us and work out a special deal. It's only fair. They want to be compensated for spending their time, then so do we.
- Doctor_Fegg 10y agoYou're not contradicting the_mitsuhiko. They said "it's definitely not the definition of open source". You answered "AGPL is an open source license, according to OSI". That is true, but "frog" is still definitely not the definition of "animal", even though a frog is an animal.
- vog 10y agoI don't think your interpretation of the_mitsuhiko's words does reflect what was meant. Because if it was, the comment of the_mitsuhiko as a whole wouldn't make sense. This is an interesting example for the difference between "reading by the word" and "reading by the meaning" (there's not a good English word for this, but in Germany we call this "sinnentnehmendes Lesen".)
- pbtflakes 10y agoI believe the English-language term is "letter of the law" for literal interpretations and "spirit of the law" for interpretations based on what something is meant to do.
- twic 10y agoI read the_mitsuhiko's comment with the same interpretation as Doctor_Fegg, and, as a native English speaker, i believe that this is the natural interpretation. I also believe it makes sense. Perhaps i can restate it. the_mitsuhiko made five assertions: 1. The AGPL is not just an updated GPL, but expands the scope of the GPL's 'infective' property considerably. 2. Some people are uncertain about what exactly the consequences of using AGPL'd software are. 3. Because of this uncertainty, there are companies which will not use AGPL'd software. 4. The AGPL is an open source license, but it is neither the only nor the most representative open source license. 5. Some people wish to license their software in a way which maximises the number of people who can use it. That means not using the AGPL, because of point 3.
- networked 10y agoA useful term to describe what it seems to me that the_mitsuhiko means is "noncentral example". The red-eyed tree frog [1] is an animal, but it is a noncentral example of an animal, i.e., it is not the typical thing you think of when you think "animal". To the_mitsuhiko, the AGPL is a noncentral example of an open source license. The term comes from the noncentral fallacy [2], which is about abusing noncentral examples. [1] https://en.wikipedia.org/wiki/Agalychnis_callidryas https://en.wikipedia.org/wiki/Agalychnis_callidryas [2] http://lesswrong.com/lw/e95/the_noncentral_fallacy_the_worst_argument_in_the/ http://lesswrong.com/lw/e95/the_noncentral_fallacy_the_worst...
- justin66 10y ago> You're actually talking about freedom to combine with closed source/proprietary software, Or freedom to combine with software using any other non-copyleft, open source license.
- webmaven 10y agoAs far as I know, AGPL is compatible with both Apache 2.0 as well as MIT/BSD permissive licenses. Which non-copyleft OSI-approved license are you having difficulty combing with AGPL?
- cstejerean 10y agoWhen is the last time you looked at the OSI approved license list? Of the most common licenses the EPL and CDDL licenses are incompatible with GPL (I suspect it's similar for the AGPL since it's a modified GPL license). When you look through the full list you will see a lot more. Basically read https://www.gnu.org/licenses/license-list.en.html#GPLIncompatibleLicenses https://www.gnu.org/licenses/license-list.en.html#GPLIncompa... and see all the free software licenses that are incompatible with the GPL. Most of those are OSI approved.
- webmaven 10y ago> [...] of the most common licenses Well, sure, but 10th- and 16th-most common (1% and <1%, respectively) isn't actually very common at all[0]. Which applies to the AGPL as well. The potential for conflict between EPL and AGPL, or CDDL and AGPL, code in projects is tiny. For that matter, the GPL was around first, and is the 2nd most popular license. Shouldn't the EPL and CDDL have been modified to be GPL compatible (the Apache Software Foundation managed to work this out with the FSF, over the Apache v2.0 and GPL v3.0 licenses, after all[1]). [0] https://www.blackducksoftware.com/top-open-source-licenses https://www.blackducksoftware.com/top-open-source-licenses [1] http://www.informationweek.com/enterprise/apache-foundation-co-founder-likes-gplv3/d/d-id/1056805 http://www.informationweek.com/enterprise/apache-foundation-...
- greyman 10y ago"Both open source licenses and free/libre licences guarantee that the software is open for use. You're actually talking about freedom to combine with closed source/proprietary software" But that "to combine" is exactly "to use", especially if it is a software library.
- niftich 10y agoThere is little uncertainty -- the terms are in plain language. OP implied that the GNU Affero GPLv3 is an updated GPLv3 "in spirit" to reflect how today a lot of software is run on the backend, instead of distributed to clients directly. I believe this is an accurate characterization. Compare the GNU GPLv3 and the GNU Affero GPLv3 yourself [1]. [1] https://www.diffchecker.com/1J4xEohZ https://www.diffchecker.com/1J4xEohZ
- the_mitsuhiko 10y ago> There is little uncertainty -- the terms are in plain language Just because a license says something does not mean that everybody interprets it the same way or that the clauses are valid in it. The "Remote Network Interaction" section has never made it to court and there are countless different interpretations one can draw from this.
- deleted 10y ago[deleted]
- niftich 10y agoDeploy some game theory here. Regardless of what the drafters of GNU Affero GPLv3 intended, there are really four outcomes here (with wording since edited for clarity): Precondition: Take a GNU Affero GPv3 product, modify it, and expose it over a network, directly or by proxy, over a network, for users to use. Your four possibilities: (1) If you provide source, and the courts uphold the 'Remote Network Interaction' clause: you're fine. (2) If you don't provide source, and the courts uphold the 'Remote Network Interaction' clause: you're screwed. (3) If you provide source, and the courts don't uphold the 'Remote Network Interaction' clause: you're fine, but you would've been fine not providing the code in retrospect. (4) If you don't provide source, and the courts don't uphold the 'Remote Network Interaction' clause: you've defeated the GNU Affero GPLv3 in court. You can absolutely make the argument for or against the business risks of releasing source code, but you can't make the argument for 'uncertainty'.
- geofft 10y agoWhat does "interacting with it remotely through a computer network" mean? If I take some caching algorithm from RethinkDB and put it in my fork of OpenSSL, do I have to make it possible for everyone who connects to my SSL server to download the source of my fork? Do I need to start stuffing the URL of corresponding source into my certificate? I'd hope the answer is no, but what in the license makes it clear that the answer is no?
- adekok 10y ago> I'm very outspoken against the GPL I'm curious as to why. The GPL has manifestly built the modern internet (cloud servers are mostly Linux, most IT startups use Linux, etc.) There are other open source licences which are also widely used (Apache, BSD, MIT). So I think the key thing to this wide-spread success is open source in general, and not the license in particular. Would you say that the GPL is negative? I.e. would we have been better off of Linux was BSD licenses? If so, why? If not, why be against the GPL?
- ocdtrekkie 10y agoPersonally, I find it hilarious that people will proclaim copyleft as the "most free", when it not only is more restrictive, but forces people who use it to open source their own contributions as well. I don't think any license should be able to tell people what to do with their own work, which yes, includes contributions to existing work. Even though I personally believe in open sourcing everything possible, when all else is equal, I would always choose something that isn't copyleft over something that is. Because I shouldn't really have to be bothered by copyright infringement concerns when using open source software.
- swsieber 10y agoYou have to open your contributions when you build upon GPL'd software, not when you use it. The GPL is very much centered around the end user, not programmers who build things. We often talk about the GPL as programmers and forget it was really built to protect the average joe from being locked out. It's most free for end users.
- ocdtrekkie 10y agoSure, I get that. But that makes it a very opinionated form of free and open. While permissive licenses like Apache and MIT do have terms, they are much more akin to saying "here is a thing I made, and I'm sharing it with whoever wants to use it and whatever they want to do with it". Whereas copyleft licenses are more like "I'll share this with you, but you have to use it in accordance with my beliefs". While I accept that the OSI definition of "open source" is pretty much universally accepted and probably isn't going to change, I personally don't really feel like copyleft should qualify because of that level of control it exerts.