Subject: Re: OpenSSL import
To: Michael C. Richardson <>
From: Thor Lancelot Simon <>
List: tech-security
Date: 06/29/1999 22:12:39
On Tue, Jun 29, 1999 at 10:00:33PM -0400, Michael C. Richardson wrote:
> >>>>> "Thor" == Thor Lancelot Simon <> writes:
>     Thor> On Tue, Jun 29, 1999 at 08:41:31PM -0400, Michael C. Richardson
>     Thor> wrote:
>     >>  What else should I remove? From comments on the list, I take it that
>     >> rc2, rc4, rc5, rsa has to go. Anything else?
>     Thor> That is certainly not my position.
>     Thor> I would personally be quite happy if you left the current
>     Thor> structure, minus code that has patent or other IP issues.  I
>   You mean like RSA.

I was personally trying to leave RSA out of this fragment of the discussion
since it's something of a special case destined to be a bone of contention:
it's only patented in the United States.

Having a knob to disable it would at least let us build binary distributions
that didn't infringe in the U.S., and would of course provide the same benefit
to a commercial vendor.  I don't know what to do about source distributions.