[Owasp-board] Brand Usage Guidelines

Thu Mar 24 18:10:28 UTC 2016

Martin,

I think this is a good analysis of the situation and I agree with you. 
If Dr. D is still not pleased with this, then I think the abuse case 
should be looked at by the board upon request. But overall, I like the 
idea of "we support OWASP" badges like this and encourage folks to use 
them - as long as they are not directly implying that OWASP endorses 
them. :)

Aloha,
Jim

On 3/24/16 4:12 AM, Martin Knobloch wrote:
> Hi all,
>
> There is a bit more background to that. When the question originally 
> was raised, I was still acting Comliant/Whistleblower officer.
> The logo the discussion is about is not the OWASP Foundation Logo (O 
> with an wasp), but the "German Chapter Supporter logo".
>
> The previous sponsor contract for the German OWASP Day, the local 
> OWASP Germany event, stated free use of that logo.
> The logo (see attached) states "German Chapter" and in the second line 
> "This company supports the the OWASP German Chapter" with and 
> German-branded OWASP Logo.
>
> This is has been rejected by me not being an complaint issue, as
>
>  1. The German chapter sponsor contract allows free usage of this logo
>  2. The logo clearly and not understandable states this company [using
>     this logo] supports the German chapter, not that the company nor
>     any service of that company would be supported or forwarded by the
>     German chapter.
>  3. The sponsor contract does only allow the usage of the chapter
>     supporter logo.
>
> Let me know if you need more background info
>
> Regards,
> -marti
>
>
> On Thu, Mar 24, 2016 at 2:40 PM, Noreen Whysel 
> <noreen.whysel at owasp.org <mailto:noreen.whysel at owasp.org>> wrote:
>
>     Josh,
>
>     We received critical comment from Dirk Wetter, suggesting that
>     allowing members (individual, corporate and sponsors) to display
>     our logo somehow constitutes a "sale" of the logo and should not
>     be permitted. He used as an example a local sponsor of OWASP
>     Germany that included an OWASP logo on their training flyer. The
>     logo included text indicating the are a supporter of OWASP which
>     in my mind makes a clear indication that they support us, not that
>     we endorse the training. However, Dirk feels that our endorsement
>     is implicit in any display of our logo. He goes as far as saying
>     our logo should not be used on partner events and events we are
>     cohosting either, which to me goes too far.
>
>     We need a balance between getting our image and links to our
>     resources out their and protecting it. We could include a rule
>     that says under no circumstances may the OWASP logo be used in
>     advertising, unless it is for a cohosted event or partnership
>     where a signed agreement exists.
>
>     Love to hear your thoughts.
>
>     Noreen Whysel
>     Community Manager
>     OWASP Foundation
>
>     On Mar 23, 2016, at 4:57 PM, Paul Ritchie <paul.ritchie at owasp.org
>     <mailto:paul.ritchie at owasp.org>> wrote:
>
>>     Hi josh.  The short answer is we have made 2 update to the wiki
>>     guideline language, and Norden has a third update change pending.
>>
>>     The red line of that recommended update is on the branding page
>>     'discussion page'.
>>
>>     @Noreen,  please take lead to expand on this short answer, AND
>>     take proactive steps to get community feedback then approval of
>>     this next set of changes.
>>
>>     Thanks Paul
>>
>>     On Mar 23, 2016 9:04 AM, "Josh Sokol" <josh.sokol at owasp.org
>>     <mailto:josh.sokol at owasp.org>> wrote:
>>
>>         Paul,
>>
>>         It seems that the question of OWASP branding has come up yet
>>         again.  I know that we set you and Noreen off to redefine our
>>         guidelines, possibly with the help of the Mozilla lawyers,
>>         but I haven't heard anything for several months on that.
>>         Would you mind giving us an update of your progress thus
>>         far?  Thank you!
>>
>>         ~josh
>>
>>     _______________________________________________
>>     Owasp-board mailing list
>>     Owasp-board at lists.owasp.org <mailto:Owasp-board at lists.owasp.org>
>>     https://lists.owasp.org/mailman/listinfo/owasp-board
>
>     _______________________________________________
>     Owasp-board mailing list
>     Owasp-board at lists.owasp.org <mailto:Owasp-board at lists.owasp.org>
>     https://lists.owasp.org/mailman/listinfo/owasp-board
>
>
>
>
> -- 
> Met vriendelijke groet,
> -martin
>
> ___________________
> Martin Knobloch
> OWASP AppSec-Eu/Research 2015 Conference Chair
> OWASP Netherlands Chapter Leader
>
> Email: martin.knobloch at owasp.org <mailto:martin.knobloch at owasp.org>
> Mobile: +31623226933
> Twitter:  @AppsScE
>             @owasp_NL
> Web: http://owasp.nl
> http://appsec.eu
>
>
> _______________________________________________
> Owasp-board mailing list
> Owasp-board at lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/owasp-board

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-board/attachments/20160324/1fea1926/attachment-0001.html>