[Owasp-board] On the OWASP Benchmark

Jim Manico jim.manico at owasp.org
Wed Oct 21 12:35:20 UTC 2015

(Sent to me from Tony Turner, said it was ok to forward to the board)

"Do we have any legal footing for enforcement? Do you know if OWASP has 
registered OWASP or any other trademarks? I'd be concerned about any 
public statements that make claims of wrongdoing not backed by evidence 
or legal frameworks. Need to be very careful to stick to the facts. I'd 
be concerned that might open OWASP up to a defamation lawsuit otherwise. 
It seems the right approach is to handle it like any other intellectual 
property issue by means of a C&D with a specific legal complaint, and 
then a general statement that doesnt name Contrast that reminds the 
public of branding policies and the meta-issues of Contrast's approach 
without specifically naming them, but IANAL. I don't think there's 
anything wrong with transparency for C&D contacts though :)"

Jim Manico
Global Board Member
OWASP Foundation

More information about the Owasp-board mailing list