Subject: Re: src/domestic
To: None <>
From: John Kohl <>
List: current-users
Date: 04/21/1999 07:38:48
>>>>> "Johan" == Johan Danielsson <> writes:

Johan> Miles Nordin <carton@Ivy.NET> writes:
>> 1. everything in CVS is exportable

Johan> Not necessarily. Why do you think the Kerberos 4 Bones release had
Johan> removed not only the crypto routines, but also all calls to them? Why
Johan> do you think that M$ uses (cryptograpically) signed plugins for their
Johan> crypto-api?

As the person who actually did that work, and had company lawyers file
the CJ paperwork with the Department of State, I can state
authoritatively that we removed all the calls to crypto to be absolutely
sure we got the "right" answer that the resulting software was not
subject to ITAR.

I have no direct experience on whether we or other people would get the
"wrong" answer if the crypto calls are left in.

==John Kohl <>, <>
Write a poem, share your heart!
Home page: <>
Note new home zip code as of July 1, 1998: 02476