Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

the issues of sspl have been frequently and loudly been brought up previously, and nothing has happened. just to reiterate, this section is ridiculously expansive:

> “Service Source Code” means the Corresponding Source for the Program or the modified version, and the Corresponding Source for all programs that you use to make the Program or modified version available as a service, including, without limitation, management software, user interfaces, application program interfaces, automation software, monitoring software, backup software, storage software and hosting software, all such that a user could run an instance of the service using the Service Source Code you make available.

it is practically impossible for anyone to comply with that, to provide source code for every single program (without limitation) that they happen to use anywhere. of course none of the major sspl-using vendors are even pretending to themselves to follow these rules.

sspl would be much better license if it just simply forbids providing services, instead of hiding behind this thin veneer of fake copyleft.

> You can even still sell Redis as a service if you want, as long as you release all the orchestration systems under the same license (something that nobody would likely do, but this shows the copyleft approach of the license).

note that this is not right, the "copyleft" is not limited to orchestration systems, it covers all programs that you use



> it is practically impossible for anyone to comply with that, to provide source code for every single program (without limitation) that they happen to use anywhere.

It is practically impossible to comply, yes, but not just because you'd need to provide the source code to all the software you're using. The thing that really makes it impossible to comply with is that you must release all of that software under the SSPL. This could be reasonably interpreted to preclude the use of FOSS software, like Linux, that you do not have the authority to relicense under the SSPL.

I wrote a blog post[0] about this a while back, but I think this is fixable if you allow the other software in the stack to be released under another FOSS license (and you could still require its disclosure).

[0] https://www.terracrypt.net/posts/the-sspl-is-not-a-reasonabl...


I believe that the original reason why they didn't just say "you're not allowed to provide this program as a service" is that MongoDB were trying to get SSPL approved by the OSI. The OSI didn't approve it because as you mention, it's basically impossible for a cloud provider to actually attempt to comply with the SSPL. Not only would they have to release the code to all software used to make the program available, they would have to do so under the SSPL. I'm not sure why MongoDB didn't change the wording when they gave up on getting the license classified as "open source".


Redis puts Redis into the open, and companies exposing Redis put everything they use to expose Redis into the open too.

The key enabler in that whole business is still Redis, so the knowledge exchange appears fair.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: