Your "ignorance" - Gee, I didn't know the server was in the US! or theirs? It would be fairly easy to figure out that the server was probably in the US, by tracing the route, watching the amount of delay between hops over time, etc. If the server was discovered, I don't think your claim of ignorance as to its location would be much of a defence. OTOH, IANAL. On Fri, 26 Jul 1996, Remo Pini wrote:

-----BEGIN PGP SIGNED MESSAGE-----

To: cypherpunks@toad.com Date: Fri Jul 26 11:26:59 1996 I have a question about legal issues:

Lets asume I have a service provider in switzerland who gives me web-space. I publish strong cryptography there. The server itself is physically in USA, but my domain is something like "www.itar.ch" (a swiss web-address). Since there is no way for me to know where the server stands, do I violate the ITAR, and if so, am I realistically prosecutable?

- --------< fate favors the prepared mind >-------- Remo Pini rp@rpini.com PGP: http://www.rpini.com/remopini/rpcrypto.html - ------< words are what reality is made of >------ -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv

iQEVAwUBMfiPZBFhy5sz+bTpAQHbKggAi7kG/Bp8x+fApJTTSDw6AAcXe+U5TyVG ladtDvnQOQE66raEqvfTWUPuyB5Fa9xqRAe/kpSkxU7802TPMnxMii3dJPLaOMv7 eYZx58VVVeSmbnC3qnN4SU5uSYnS7dNXE50kPaZDq0bap3O2LVB0yTL30xqBuF5+ EJs73dJQRKt/UipbymTLmeThDM1bRj0CxRL5b1OHHoYM5yDMhpxrS5KWnke7Pxqe lTM3K+XTdpLC3MgmD15hpAfpn82uYGm8a21EsJ/ODLdxrdEv7mRm36V7EYH+JAqM 9jM3Hy38vnGHk6inB2dLGofa5tzFdbEhW2TtL6chRAnmemQkmVN8jg== =eWJb -----END PGP SIGNATURE-----