software is ever more widely embedded in devices that impose technical

limitations on the user's freedom to change it.

However, FSF always made a clear distinction to avoid conflating these

``lock-down'' measures with legitimate applications that give users control,

as by enabling them to choose higher levels of system or data security within

their networks, or by allowing them to protect the security of their

communications using keys they can generate or copy to other devices for

sending or receiving messages.  Such technologies present no obstacles to

software freedom and the goals of copyleft.

The public GPLv3 drafting process sought to balance these positions of

copyleft advocates with various disparate views of the larger

Free-Software-using community.  Ultimately, FSF compromised to the GPLv3\S3

and GPLv3\S6 provisions that, taken together, are a minimalist set of terms

sufficient to protect the software freedom against the threat of invasive

para-copyright.

The compromises made were ultimately quite reasonable.  The primary one is

embodied in GPLv3\S6's ``User Product'' definition (see \S~\ref{user-product}

in this tutorial for details).  Additionally, some readers of early GPLv3

drafts seem to have assumed GPLv3 contained a blanket prohibition on DRM; but

it does not.  In fact, no part of GPLv3 forbids DRM regarding non-GPL'd

works; rather, GPLv3 forbids the use of DRM specifically to lock-down

restrictions on users' ability to install modified versions of the GPL'd

software itself, but again, \textit{only} with regard to User Products.

\section{GPLv3~\S3: What Hath DMCA Wrought}

\label{GPLv3s3}

As discussed in \S~\ref{software-and-non-copyright} of this tutorial,

\href{http://www.law.cornell.edu/uscode/text/17/1201}{17 USC~\S1201} and

  the ``Digital Millennium Copyright Act'', or ``DMCA'', as that was the name

  of the bill that so-modified these sections of the USC\@.} prohibits users

from circumventing technological measures that implement DRM\@.  Since this

is part of copyright law and the GPL is primarily a copyright license, and

since what the DMCA calls ``circumvention'' is simply ``modifying the

software'' under the GPL, GPLv3 must disclaim that such anti-circumvention

provisions are not applicable to the GPLv3'd software.  GPLv3\S3 shields

users from being subjected to liability under anti-circumvention law for

exercising their rights under the GPL, so far as the GPL can do so.

First, GPLv3\S3\P1 declares that no GPL'd program is part of an effective

technological protection measure, regardless of what the program does.  Early

drafts of GPLv3\S3\P1 referred directly to the DMCA, but the final version

instead includes instead an international legal reference to

anticircumvention laws enacted pursuant to the 1996 WIPO treaty and any

similar laws.  Lawyers outside the USA worried that a USA statutory reference

could be read as indicating a choice for application of USA law to the

license as a whole.  While the FSF did not necessarily agree with that view,

the FSF decided anyway to refer to the WIPO treaty rather than DMCA, since

several national anticircumvention laws were (or will likely be) structured

more similarly to the anticircumvention provisions of the DMCA in their

implementation of WIPO\@.  Furthermore, the addition of ``or similar laws''

provides an appropriate catch-all.

Furthermore, GPLv3\S3\P2 states precisely that a conveying party waives the

power to forbid circumvention of technological measures only to the extent

that such circumvention is accomplished through the exercise of GPL rights in

the conveyed work.  GPLv3\S3\P2 makes clear that the referenced ``legal

rights'' are specifically rights arising under anticircumvention law.  and

refers to both the conveying party's rights and to third party rights, as in

some cases the conveying party will also be the party legally empowered to

enforce or invoke rights arising under anticircumvention law.