And I don't understand why you did not respond to this point when I brought it up earlier. This area is MOST CERTAINLY NOT free of legislation. Have you tried to openly export a IDEA- or 3DES-based non-key-recovery (real commercial) product lately? Have you set up an open, publically announced FTP site where anyone can freely fetch strong encryption sources? If not, then explain why, if there is no legislation on this matter, couldn't you do it?
Well I can't speak for Tim's actions in this area but I can say that I have made strong crypto available for download via the INet. And I ahev openly announced that I have made such available on numerious newsgroups and mailing lists.
Ok. I'll give you a brownie point for an FTP site. I honestly don't think the NSA has time to go after a few, small-time, non-commercial FTP sites, and I don't believe site maintainers like you have much to lose on this matter. The NSA is not as dumb as the Scientologists on fighting a handful of individuals on the Net (most of whom can easily get any job they want in the high tech industry, including charging
$100 per hour consulting, so the NSA has almost no leverage, and the backlash is even worse).
On the other hand, SGI, Sun, HP, IBM, AT&T, etc. have much more to lose than you do. They have huge government contracts (which they coincidentally announced very soon after they signed up for the key-recovery initiative), which the NSA can threaten. They have other export licenses (non-encryption-related) they need.
There is no legislation on this matter only an unconstitutional presidental order.
Well, I'm not going to get technical here on just what is in effect. A presidential order is often as good as a hard legislation. In this case, it is just as good. And it's not just encryption. Look at what happened to SGI when several supercomputers were discovered to have gone to China? Again, it's just an execute order, not hard legislation. (And there are good reasons for giving the executive branch executive priviledge, as there is no reason to micromanage other branches of the government unless there is a serious issue.) And this is what the administration argued for before enough legislators thought it was a serious issue. My conclusion on the issue of whether or not there is legislation on this matter, is yes. Is it technically a bill which passed congress? No. Is it some rule that some branch of government can use to harass you? Yes. That's effective enough for me (in fact, it's worse, because it is "more arbitrary"). Ern -- Ernest Hua, Software Sanitation Engineer/Chief Cut And Paste Officer Chromatic Research, 615 Tasman Drive, Sunnyvale, CA 94089-1707 Phone: 408 752-9375, Fax: 408 752-9301, E-Mail: hua@chromatic.com