nospam@freedom.net wrote:

http://www.infosecuritymag.com/sept/q%26a.htm Q & A WITH WILLIAM REINSCH

Reinsch: What the government has also said is that if it's a key-recovery product, it can be exported with any bit length without constraint. And that's what we would prefer to focus on -- to tell people, if you're product has recovery features, bit length doesn't matter.

Ah, something we can finally agree upon: "if your product has recovery features, bit length doesn't matter" (it's insecure).