[whispersystems] MIT/LGPL license of WhisperSystems/curve25519-java?

[Lundberg, Frans]

First, I would like to express my gratitude for the code in repo:

https://github.com/WhisperSystems/curve25519-java

Great work!

I work for ASSA ABLOY AB, the world's largest lock manufacturer in the world. We are starting
(in a very small scale) to contribute to the open source world. We recently released a secure channel
implementation called Salt Channel. See: https://github.com/assaabloy-ppi/salt-channel/.

Anyway, Whisper's Java code is impressive. However, we cannot use it because of the GPL license.
Would you consider releasing WhisperSystems/curve25519-java with a more business-friendly license?
Perhaps MIT or LGPL. It is a low-level library... and based on the public domain work by Bernstein.
Of course, it is not my thing to have opinion on what license you use for this. I would just like to make
you aware of our needs.

If WhisperSystems/curve25519-java would have a MIT/LGPL license, it would be easier for
us to contribute more to the open source world.

Thanks, Frans

Frans Lundberg
Concept Innovation Manager, Pre-Product Innovation
Shared Technologies, Stockholm
ASSA ABLOY AB, Phone: [phone], www.assaabloy.com

[Stephen Michel]

Would you consider releasing your product's source code under a license that respects the freedom of your product's users?

I, for one, appreciate that Signal and related libraries are published under a copyleft license and that OWS is willing to enforce it.

Cheers,
Stephen

Post by Lundberg, Frans
https://github.com/WhisperSystems/curve25519-java
Great work!
I work for ASSA ABLOY AB, the world's largest lock manufacturer in the world. We are starting
(in a very small scale) to contribute to the open source world. We
recently released a secure channel
https://github.com/assaabloy-ppi/salt-channel/.
Anyway, Whisper's Java code is impressive. However, we cannot use it
because of the GPL license.
Would you consider releasing WhisperSystems/curve25519-java with a more
business-friendly license?
Perhaps MIT or LGPL. It is a low-level library... and based on the
public domain work by Bernstein.
Of course, it is not my thing to have opinion on what license you use
for this. I would just like to make
you aware of our needs.
If WhisperSystems/curve25519-java would have a MIT/LGPL license, it would be easier for
us to contribute more to the open source world.
Thanks, Frans
Frans Lundberg
Concept Innovation Manager, Pre-Product Innovation
Shared Technologies, Stockholm
ASSA ABLOY AB, Phone: [phone], www.assaabloy.com

[h***@tutamail.com]

"business-friendly like" ????

"end-user freedom  like "sounds better,thanks Stephen.


.-.-.-.-.-.-.-.-.-.-.-.-.-.-
IkFyZ3VpbmcgdGhhdCB5b3UgZG9uJ3QgY2FyZSBhYm91dCB0aGUgcmlnaHQgdG8gcHJpdmFjeSBiZWNhdXNlIHlvdSBoYXZlIG5vdGhpbmcgdG8gaGlkZSBpcyBubyBkaWZmZXJlbnQgdGhhbiBzYXlpbmcgeW91IGRvbid0IGNhcmUgYWJvdXQgZnJlZSBzcGVlY2ggYmVjYXVzZSB5b3UgaGF2ZSBub3RoaW5nIHRvIHNheSI=

Post by Stephen Michel
Would you consider releasing your product's source code under a license that respects the freedom of your product's users?
I, for one, appreciate that Signal and related libraries are published under a copyleft license and that OWS is willing to enforce it.
Cheers,
Stephen

Post by Lundberg, Frans

Post by Lundberg, Frans
https://github.com/WhisperSystems/curve25519-java

Great work!
I work for ASSA ABLOY AB, the world's largest lock manufacturer in the world. We are starting
(in a very small scale) to contribute to the open source world. We recently released a secure channel
implementation called Salt Channel. See: >> https://github.com/assaabloy-ppi/salt-channel>> /.
Anyway, Whisper's Java code is impressive. However, we cannot use it because of the GPL license.
Would you consider releasing WhisperSystems/curve25519-java with a more business-friendly license?
Perhaps MIT or LGPL. It is a low-level library... and based on the public domain work by Bernstein.
Of course, it is not my thing to have opinion on what license you use for this. I would just like to make
you aware of our needs.
If WhisperSystems/curve25519-java would have a MIT/LGPL license, it would be easier for
us to contribute more to the open source world.
Thanks, Frans
Frans Lundberg
Concept Innovation Manager, Pre-Product Innovation
Shared Technologies, Stockholm
ASSA ABLOY AB, Phone: [phone], >> www.assaabloy.com

--
Sent from my phone; please excuse my brevity.
Email policy: > http://smichel.me/email

[Lundberg, Frans]

Personally, I would like to see more open source code in electronic
locks and access control in general. And my personal view is that
it would be very interesting to see an electronic open source
lock (open source hardware too) on the market. I am not
at liberty to say whether ASSA ABLOY considers releasing our
product's source code under an open source licence.
Or rather: it depends. The curve25519 library is a low-level library
that could be used for *both* open source projects and proprietary
solutions. We actual *do* release some of our code as open source
already (see link in original post).

I understand the reasons why the Signal applications are copyleft.
Actually, I like it. However, the lower-level libraries, such as
the Curve25519 implementation could still be LGPL (or similar).

/ Frans



________________________________
From: Stephen Michel [***@tufts.edu]
Sent: Thursday, November 03, 2016 14:03
To: Lundberg, Frans; ***@lists.riseup.net
Subject: Re: [whispersystems] MIT/LGPL license of WhisperSystems/curve25519-java?

Would you consider releasing your product's source code under a license that respects the freedom of your product's users?

I, for one, appreciate that Signal and related libraries are published under a copyleft license and that OWS is willing to enforce it.

Cheers,
Stephen

On November 3, 2016 6:21:45 AM EDT, "Lundberg, Frans" <***@assaabloy.com> wrote:

First, I would like to express my gratitude for the code in repo:

https://github.com/WhisperSystems/curve25519-java

Great work!

I work for ASSA ABLOY AB, the world's largest lock manufacturer in the world. We are starting
(in a very small scale) to contribute to the open source world. We recently released a secure channel
implementation called Salt Channel. See: https://github.com/assaabloy-ppi/salt-channel/.

Anyway, Whisper's Java code is impressive. However, we cannot use it because of the GPL license.
Would you consider releasing WhisperSystems/curve25519-java with a more business-friendly license?
Perhaps MIT or LGPL. It is a low-level library... and based on the public domain work by Bernstein.
Of course, it is not my thing to have opinion on what license you use for this. I would just like to make
you aware of our needs.

If WhisperSystems/curve25519-java would have a MIT/LGPL license, it would be easier for
us to contribute more to the open source world.

Thanks, Frans

Frans Lundberg
Concept Innovation Manager, Pre-Product Innovation
Shared Technologies, Stockholm
ASSA ABLOY AB, Phone: [phone], www.assaabloy.com<http://www.assaabloy.com>

--
Sent from my phone; please excuse my brevity.
Email policy: http://smichel.me/email


Click here<https://www.mailcontrol.com/sr/kavaJV3adS3GX2PQPOmvUpjAP6sbmVCmw3rxga7k2yhoe+bCcffdVAwyoIpncsxyKyBGbYB4IjEoKRuEdgZyEA==> to report this email as spam.

[Laurence Berland]

Hi Frans,

Just putting aside the debate about licenses, please keep in mind this is a
public discussion forum, and most of us (including me) are not affiliated
with Open Whisper Systems, so if you want to discuss this possibility with
the people who actually could decide whether or not to make such a change,
you may want to reach out to OWS directly (assuming nobody from there has
responded to you privately already)

Thanks,
Laurence

On Thu, Nov 3, 2016 at 6:27 AM, Lundberg, Frans <

Post by Lundberg, Frans
Personally, I would like to see more open source code in electronic
locks and access control in general. And my personal view is that
it would be very interesting to see an electronic open source
lock (open source hardware too) on the market. I am not
at liberty to say whether ASSA ABLOY considers releasing our
product's source code under an open source licence.
Or rather: it depends. The curve25519 library is a low-level library
that could be used for *both* open source projects and proprietary
solutions. We actual *do* release some of our code as open source
already (see link in original post).
I understand the reasons why the Signal applications are copyleft.
Actually, I like it. However, the lower-level libraries, such as
the Curve25519 implementation could still be LGPL (or similar).
/ Frans
------------------------------
*Sent:* Thursday, November 03, 2016 14:03
*Subject:* Re: [whispersystems] MIT/LGPL license of
WhisperSystems/curve25519-java?
Would you consider releasing your product's source code under a license
that respects the freedom of your product's users?
I, for one, appreciate that Signal and related libraries are published
under a copyleft license and that OWS is willing to enforce it.
Cheers,
Stephen
On November 3, 2016 6:21:45 AM EDT, "Lundberg, Frans" <

Post by Lundberg, Frans
https://github.com/WhisperSystems/curve25519-java
Great work!
I work for ASSA ABLOY AB, the world's largest lock manufacturer in the world. We are starting
(in a very small scale) to contribute to the open source world. We recently released a secure channel
implementation called Salt Channel. See: https://github.com/assaabloy-ppi/salt-channel/.
Anyway, Whisper's Java code is impressive. However, we cannot use it because of the GPL license.
Would you consider releasing WhisperSystems/curve25519-java with a more business-friendly license?
Perhaps MIT or LGPL. It is a low-level library... and based on the public domain work by Bernstein.
Of course, it is not my thing to have opinion on what license you use for this. I would just like to make
you aware of our needs.
If WhisperSystems/curve25519-java would have a MIT/LGPL license, it would be easier for
us to contribute more to the open source world.
Thanks, Frans
Frans Lundberg
Concept Innovation Manager, Pre-Product Innovation
Shared Technologies, Stockholm
ASSA ABLOY AB, Phone: [phone], www.assaabloy.com

--
Sent from my phone; please excuse my brevity.
Email policy: http://smichel.me/email
Click here
<https://www.mailcontrol.com/sr/kavaJV3adS3GX2PQPOmvUpjAP6sbmVCmw3rxga7k2yhoe+bCcffdVAwyoIpncsxyKyBGbYB4IjEoKRuEdgZyEA==>
to report this email as spam.

[Jeff Burdges]

Post by Lundberg, Frans
However, we cannot use it because of the GPL license.
Would you consider releasing WhisperSystems/curve25519-java with a
more business-friendly license?

If you want it for a close source project, then I suggest you contact
them privately to ask them to sell you a suitable closed source
license.

Right now, there is a trend towards releasing crypto under more
permissive licenses, but that's partially due to Apple's obnoxious app
store polices being one primary reason.* Java cannot be used in an iOS
app anyways, so that reason does not apply here.

Jeff

* I'm hoping the FSF creates an App Store compatible GPL that works by
the developer assuming Apple's GPL obligation and only granting Apple
the right to distribute a reproducible build.