On Fri, May 11, 2001 at 09:53:04PM -0400, [EMAIL PROTECTED] wrote: > > I'm not sure that that matters. The BXA refers to "Open Cryptographic > Interfaces". My understanding was that any software which contained hooks > to call other software which actually performed encryption was regulated > as if it contained the encryption itself, since it contains an implementation > of a cryptographic interface.
Ah, that's very interesting. I will do the BXA notification before I distribute my current package. > > > Probably. It's my theory that the software is no longer export restricted > > > once you make the BXA notification. > > That's not true. See here: > > http://www.bxa.doc.gov/Encryption/lechart1.html > > Under the category 'Unrestricted source code ("open source")' it contains > an additional restriction 'may not knowingly export to the T-7'. T-7 > is defined as: Cuba, Iran, Iraq, Libya, North Korea, Syria, and Sudan. Also very interesting. > Our FTP servers do not block these countries, so I don't know if we > would still be considered compliant under these rules. I think it's > safer to leave everything in non-US. I probably agree, but what about this sentence from section 2.1.5 of Debian Policy: A package containing a program with an interface to a cryptographic program or a program that's dynamically linked against a cryptographic library should not be distributed via the non-US server if it is capable of running without the cryptographic library or program. I am really not sure if this applies or not; if the program is linked against the ssl library, I doubt it can run without it, but if it isn't, which is doable with different Makefile settings, of course it doesn't require that library. I do see and agree with your point regarding the FTP servers. Would it be sufficient to add a README to the servers mentioning the restrictions, since they apply to so many different packages, and disclaiming responsibility for violations? Or maybe this wouldn't be legally valid, because people who use apt don't see that kind of thing. This is written shortly before I go to bed, so excuse me if anything doesn't make sense. - Jimmy Kaplowitz [EMAIL PROTECTED]
