David Maxwell wrote:
> > > Americans in the NetBSD core can openly upload
> > > (export) strong crypto to a Canadian ftp/web server, which anyone in
> > > the world can download from, without breaking any US laws.
> > As I understand it, that is not the case at all. ITAR explicitly
> > makes it illegal for an American to make crypto code covered by
> > ITAR available to foreigners, except Canadians. Thus, uploading
> > the code to a server in Canada that then makes it available to
> > foreigners is just as bad as setting up the server in the US.
> I agree. The license always states (from a Canadian perspective)
> (paraphrased) "You can export strong crypto from the US to Canada,
> but the recipient (The Canadian citizen) must agree not to re-export
> that to anywhere outside the US or Canada."

Okay, so there may be some hesitation by Americans to export to Canada.
Then why not let me set up a machine with a NetBSD mirror.  I simply
use a bot to log in to an American server, and copy the files onto a
Canadian server.  That way, only I am the one doing the exporting.
And since I don't care about stupid US laws, my company and I am more
than willing to accept the consequences.  Would that be acceptable to
all?

> That statement has been so clear in every script I've seen, I don't
> understand how the OpenBSD people feel they can ignore that.

Mind you if the US really wanted to cut down on violence and terrorism,
they should restrict guns, not crypto.  I think the OpenBSD people are
correct in ignoring it, since the US export laws are dubious, and I don't
think there has ever been a conviction against a US citizen, with respect
to exporting strong crypto in open source products.

Alicia.