The return of Iceweasel
Any distribution of Mozilla software which diverges from the official tarballs must use a different name unless specific approval has been obtained from Mozilla. Debian's version does indeed differ in a number of ways. The project could seek approval from Mozilla to call its version of the browser "Firefox," but that approval does not help others who may wish to redistribute the software after receiving it from Debian. Also, the Debian Firefox build omits the official logos, since they carry a non-free license; that is another change which runs afoul of the trademark rules.
In the 2005 discussion, the Debian Project had seemingly come to a resolution with the Mozilla Foundation, as represented by Gervase Markham, where Debian would be trusted to make reasonable changes and the omission of the logos was condoned. All seemed well, and Debian has been shipping Firefox under this understanding for over a year. In February of this year, however, Mike Connor from Mozilla Corporation posted a bug report with the Debian project. This bug, marked "serious," stated that shipping a browser called "Firefox" was a trademark violation:
Under the previous understanding, the Mozilla Foundation had seemingly concluded that it could trust Debian to be judicious in its patches to Firefox. The Mozilla Corporation, instead, is taking a harder line:
The conversation then lapsed until September 18, when Mr. Connor restarted it. His position has not softened:
Anybody familiar with the Debian Project will know that asking it to "bend the DFSG a little" tends not to go over very well.
Mozilla's immediate complaint is about the omission of the official logo, a change which had seemingly been approved back in 2005. But Mr. Connor is also taking issue with a number of the other patches shipped by Debian, and has repeatedly said that every patch that the distribution applies must be approved by the Mozilla Corporation ahead of time.
So what happened to the previous understanding? It appears that the shift to the Mozilla Corporation has brought a new approach to trademark policies - and new people into the trademark enforcement role. Meanwhile, the understanding that the Debian Project thought it had was never really codified onto a piece of paper with the requisite signatures - and, as a result, it is easy for the Mozilla Corporation to change. A cardinal rule for dealing with corporations is to always assume that the people you are dealing with will soon be replaced by others with a much more hostile attitude; that would appear to be what has happened here. With regard to the logo:
The Debian developers have no intention of going against Mozilla's wishes. Eric Dorland, one of the Debian Firefox maintainers, did ask for some time, however:
The response was not particularly sympathetic:
Eric also asked for clarification on the patch review policy, wondering if it applied even to security updates. The answer was clear:
As for your straw man about security bugs, what security bugs would you be fixing with your own patches? If there are security bugs, they should be fixed upstream, not in your own tree.
Many people do not consider security to be a "straw man," however. Debian stable currently includes Firefox 1.0.4, which is no longer supported by the Mozilla developers. So Debian must backport its own security fixes, and may not want to wait for the Mozilla bureaucracy to review those fixes before putting them out. The Mozilla response here is that users should simply be force-upgraded to a supported version; that is, indeed, what a number of distributors do, but people are not always happy about it. There are not many other projects which force upgrades in this manner.
The end result of all this, as expressed by Steve Langasek:
Eric Dorland has stated that he will be changing the name of the browser soon. Previously, this scenario has been described as the "Iceweasel" approach - but Eric has not said what name he will be using. He has asked if Debian sarge can continue to ship "firefox," or whether the name will have to be changed in the stable distribution; that question has not yet been answered.
Debian is not the only project to express some frustration with Mozilla; consider this message sent to the Fedora advisory board in August on why Firefox security updates tend to be slow in coming:
See also this message from last June on problems the Ubuntu developers have had in keeping Firefox secure in their distribution.
The Mozilla project has, mainly via the Firefox browser, changed the way people work with the web. It has brought millions of people into the community of free software users and ended the destructive domination of a single, proprietary browser. Firefox is good stuff, and we are far richer for its existence.
One cannot help wondering, however, if the Mozilla Corporation, now one year old, isn't losing touch with the free software community it is ostensibly part of. Releasing software under a free license means losing control over what happens to it, but Mozilla appears to be having a hard time letting go. The result makes life harder for Linux distributors, and for Linux users as well.
Nobody really wants to fork Firefox. The Mozilla Corporation, however,
would appear to be requiring distributors to do exactly that, whether they
want to or not. No distributor has any interest in shipping Iceweasel, but
it appears that a number of us will be using it anyway - or, perhaps,
looking harder at some of the other free browsers out there.
