Subject: Re: src/domestic
To: None <joda@pdc.kth.se>
From: John Kohl <jtk@kolvir.arlington.ma.us>
List: current-users
Date: 04/21/1999 07:38:48
>>>>> "Johan" == Johan Danielsson <joda@pdc.kth.se> writes:

Johan> Miles Nordin <carton@Ivy.NET> writes:
>> 1. everything in CVS is exportable

Johan> Not necessarily. Why do you think the Kerberos 4 Bones release had
Johan> removed not only the crypto routines, but also all calls to them? Why
Johan> do you think that M$ uses (cryptograpically) signed plugins for their
Johan> crypto-api?

As the person who actually did that work, and had company lawyers file
the CJ paperwork with the Department of State, I can state
authoritatively that we removed all the calls to crypto to be absolutely
sure we got the "right" answer that the resulting software was not
subject to ITAR.

I have no direct experience on whether we or other people would get the
"wrong" answer if the crypto calls are left in.

-- 
==John Kohl <jtk@kolvir.arlington.ma.us>, <john_kohl@alum.mit.edu>
Write a poem, share your heart!
Home page: <http://people.ne.mediaone.net/jtk/>
Note new home zip code as of July 1, 1998: 02476