Isn't the question more "How should any other user attribute OSM?" than "Is it legally sufficient?"? I believe that it should generally be on the main page (next to map or overlaid) and not somewhere deep in legal/copyright section that none except for lawyers ever reads. osm.org should set the example for others in this matter... LM_1