As documented on our web site
http://www.kermit-project.org/k95.html#export
Kermit 95 has been approved for export including an unrestricted
version of OpenSSL integrated with a full implementation of MIT's
Kerberos for Windows.
Export Permission
Export of cryptographic software is restricted by United States of
America Export Administration Regulations. This is a matter of USA
law, which governs the New York based Kermit Project.
The United States Department of Commerce Bureau of Industry and
Security (BIS), via CCATS # G025631 dated 07/16/2002, has granted to
Kermit 95:
* Export Control Classification Number (ECCN): 5D002
(Telecommunications and Information Security - Software), Paragraph
C.1.
* Export License Exception ENC (Encryption Commodities and Software)
under Sections 740.17(A) and 740.17(B)(3) of the United States Export
Administration Regulations (EAR).
This allows export of the cryptographic version of Kermit 95 to all
countries except Cuba, Iran, Iraq, North Korea, Libya, Sudan, and
Syria. Of course the non-cryptographic version can be exported to any
country at all. (If you disagree with the composition of the list of
embargoed countries or any other facet of US export law, please direct
your comments to the appropriate government or international bodies.)
> Date sent: Tue, 05 Nov 2002 13:12:27
> To: [EMAIL PROTECTED]
> From: "Thomas J. Hruska" <[EMAIL PROTECTED]>
> Subject: Re: OpenSSL on WIN2K
> Send reply to: [EMAIL PROTECTED]
>
> Passing out this type of advice may end up getting application
> developers in a lot of hot water. The distribution of the OpenSSL
> dll's has no relation to the legal requirements involving the use of
> such dll's. I believe the term the US government uses for
> applications that do make use of such a concept is an "open
> cryptographic interface".
>
> I have been told, but have no proof of such, the US Department of
> Commerce WILL NOT approve the export of any product that uses the
> OpenSSL dll's. Futher, all the applications I know of that have
> export approval, which use OpenSSL, is in fact static linked to the
> OpenSSL library.
>
> It would be interesting to know if any US based application, which
> has export approval, does use the OpenSSL dll's.
>
> Ken
>
Jeffrey Altman * Sr.Software Designer Kermit 95 2.0 GUI available now!!!
The Kermit Project @ Columbia University SSH, Secure Telnet, Secure FTP, HTTP
http://www.kermit-project.org/ Secured with MIT Kerberos, SRP, and
[EMAIL PROTECTED] OpenSSL.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
