> If I am using SSL 128 Bit Encryption considered "retail" encryption by the
> federal government?
> We desire to use it in an application where encrypted data is transported
> from a ASP in the USA to Mexico and back, however we are unsure
> of the legal
> implications can you please help or send us to someone that can. Our
> understanding is that SSL would have to apply with the federal
> government to
> classify it as "retail". yet the government does not publish the list of
> encryption tools that are considered "retail". They state that the company
> themselves could tell us.
Even if SSL itself were classified as retail (which it couldn't be, since
it's a protocol), this wouldn't make your product which uses SSL retail. A
product that can hook into external encryption routines is itself encryption
and would itself need to be classified. Check out
http://www.bxa.doc.gov/Encryption/qanda.htm
DS
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
