Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
The click-wrap conundrum
Mark Rasch, 2005-10-24

Suppose you are setting up a website to deliver the latest software, product, or service. Before the site goes live, you go to your lawyer (of course you do, don't you?) who reviews your online privacy policy, your online security policy, and your policy regarding collecting information from or about children. Your lawyer reviews the site overall for anything that might be considered or interpreted a fraudulent or deceptive practice. Of course, if it were up to lawyers, the only content on the Internet would be in the form of disclaimers.

Comments Mode:
The click-wrap conundrum 2005-10-24
Todd Knarr (1 replies)
Re: The click-wrap conundrum 2005-10-24
Mark Rasch (1 replies)
Re: Re: The click-wrap conundrum 2005-10-25
Anonymous
Cigarettes 2005-10-24
Theuns
The click-wrap conundrum 2005-10-25
Anonymous
The click-wrap conundrum 2005-10-25
Dan S. (1 replies)
In this particular case, the terms do seem so egregious that they shouldn't be enforceable. But that is irrelevant to the general question of so-called "click-wrap" agreements.

A contract is supposed yo be an agreement between two parties. Traditionally, a contract needed to be "signed, sealed, and delivered" in order to be enforceable. A simple signature has long been considered to be acceptable for the "signed and sealed" requirements, but a paper contract still neds to be delivered to the other party in order to be valid. If I receive a proposed paper contract by mail, sign it, but then think the better of it and do not mail it back, the fact that a "signed" copy exists in my house does not bind me to the contract.

Agreeing to a "click-wrap" contract presented on a computer screen by software which one has purchased from a retail store is analagous to the contract which was signed but not returned. The physical media from which the software was loaded is my property, and so is the computer screen which presented me with the question of whether I agree. There was no actual interaction with the software company, so such "agreements" should be legally null and void. Copyright law still applies, of course, but there should be no other restrictions on what I do with the software.

In the case of software downloads, where the server requires an affirmitave response to the "Do you agree?" question before it will send the software, there is interaction, and the agreement may be enforceable, on the theory that the server's programming makes it a true "agent" of the software company, even though not human. But if the requested "agreement" occurs offline, then again, the downloader "interacts" only with his own property (the computer), and there is no valid agreement between two parties at all.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/365/32600#32600
Understanding 2005-11-01
Sean







 

Privacy Statement
Copyright 2009, SecurityFocus