Re: USA crypto rules and libssl-dependent packages

2001-05-14 Thread Steve Langasek
Hi Andrew, On Mon, 14 May 2001, Andrew Stribblehill wrote: > Quoting Jimmy Kaplowitz <[EMAIL PROTECTED]>: > > On Fri, May 11, 2001 at 09:53:04PM -0400, [EMAIL PROTECTED] wrote: > > > > Our FTP servers do not block these countries, so I don't know if we > > > would still be considered compliant u

Re: USA crypto rules and libssl-dependent packages

2001-05-14 Thread Andrew Stribblehill
Quoting Jimmy Kaplowitz <[EMAIL PROTECTED]>: > On Fri, May 11, 2001 at 09:53:04PM -0400, [EMAIL PROTECTED] wrote: > > Our FTP servers do not block these countries, so I don't know if we > > would still be considered compliant under these rules. I think it's > > safer to leave everything in non-US

Re: USA crypto rules and libssl-dependent packages

2001-05-13 Thread Brian Ristuccia
On Sat, May 12, 2001 at 11:12:34PM -0400, Jimmy Kaplowitz wrote: > On Sat, May 12, 2001 at 10:10:30PM -0400, Brian Ristuccia wrote: > > > > Choice 3 is best. People who live in countries where the use of cryptography > > is restricted are probably subject to being arbitrarily jailed or murdered >

Re: USA crypto rules and libssl-dependent packages

2001-05-12 Thread Jimmy Kaplowitz
On Sat, May 12, 2001 at 10:10:30PM -0400, Brian Ristuccia wrote: > > Choice 3 is best. People who live in countries where the use of cryptography > is restricted are probably subject to being arbitrarily jailed or murdered > by their state's government anyway. Going out of your way to provide > cr

Re: USA crypto rules and libssl-dependent packages

2001-05-12 Thread Brian Ristuccia
On Sat, May 12, 2001 at 09:52:48PM -0400, Jimmy Kaplowitz wrote: > Thank you all very much for replying. I am torn between three avenues that I > am > considering taking. > > Choice 3: Just change the main althea package to include ssl support, and add > to the package description and README.Debi

Re: USA crypto rules and libssl-dependent packages

2001-05-12 Thread Jimmy Kaplowitz
Thank you all very much for replying. I am torn between three avenues that I am considering taking. Choice 1: Keep althea in main and make a completely separate althea-ssl package in non-US. This would allow me to provide a source package for althea that has no Build-Dependency on libssl-dev, whic

Re: USA crypto rules and libssl-dependent packages

2001-05-12 Thread Branden Robinson
On Fri, May 11, 2001 at 10:01:25PM -0400, Jimmy Kaplowitz wrote: > What if they are living in France, where private use of cryptography is > illegal? IIRC, that is no longer the case. Perhaps someone from France could confirm this. -- G. Branden Robinson |Damnit, we're all going

Re: USA crypto rules and libssl-dependent packages

2001-05-11 Thread Jimmy Kaplowitz
On Fri, May 11, 2001 at 09:53:04PM -0400, [EMAIL PROTECTED] wrote: > > I'm not sure that that matters. The BXA refers to "Open Cryptographic > Interfaces". My understanding was that any software which contained hooks > to call other software which actually performed encryption was regulated > as

Re: USA crypto rules and libssl-dependent packages

2001-05-11 Thread Jimmy Kaplowitz
On Fri, May 11, 2001 at 09:03:48PM -0400, Brian Ristuccia wrote: > > > > > > > > > > 2) Do the binary .debs go in non-US? > > > > > > Yes. Policy currently requires it. > > > > OK, I understand that this is a quirk of Debian policy, and not US law. > > > > It wouldn't make sense for .deb's t

Re: USA crypto rules and libssl-dependent packages

2001-05-11 Thread sharkey
> Really? I am not doing any static linking with libssl, only dynamic, so I > don't believe that I am including any crypto. I'm not sure that that matters. The BXA refers to "Open Cryptographic Interfaces". My understanding was that any software which contained hooks to call other software which

Re: USA crypto rules and libssl-dependent packages

2001-05-11 Thread Brian Ristuccia
On Fri, May 11, 2001 at 08:28:12PM -0400, Jimmy Kaplowitz wrote: > > > > > > > 2) Do the binary .debs go in non-US? > > > > Yes. Policy currently requires it. > > OK, I understand that this is a quirk of Debian policy, and not US law. > It wouldn't make sense for .deb's to go in a place diff

Re: USA crypto rules and libssl-dependent packages

2001-05-11 Thread Jimmy Kaplowitz
On Fri, May 11, 2001 at 01:51:54AM -0400, Brian Ristuccia wrote: > > > > 1) I live in the US. Therefore, do I have to send a BXA notification to the > > government (I believe license exception TSU is applicable - correct me if > > I'm > > wrong)? > > You may. Since it's easy, you probablys hould

Re: USA crypto rules and libssl-dependent packages

2001-05-11 Thread Brian Ristuccia
On Thu, May 10, 2001 at 07:27:44PM -0400, Jimmy Kaplowitz wrote: > Hi. I am a novice Debian package maintainer, in the queue for becoming an > official developer. I am maintaining a package called althea, which is an > IMAP email client for GTK+. They have recently added support for SSL through > l

USA crypto rules and libssl-dependent packages

2001-05-10 Thread Jimmy Kaplowitz
Hi. I am a novice Debian package maintainer, in the queue for becoming an official developer. I am maintaining a package called althea, which is an IMAP email client for GTK+. They have recently added support for SSL through linking to libssl (from OpenSSL). This is configurable based on the values