Re: Exporting from Canada (was Re: Let's try breaking an SSL RC4 key)
: marc: : > However, goods of U.S. origin are export restricted, unless said : > goods are further processed outside the U.S. so as to result in a : > substantial change in value, so some of the PGP development would : > need to be done in Canada.
: How about compiling it? THAT is "further processing"......
Perhaps...but I for one wouldn't trust anyone else to compile my copy of PGP...would you?
I would use a precompiled version of PGP *if* it came from and was signed by someone I trusted. After all - I don't read all the source code - do you?
And, note, it says sustantial change in value...I don't know if this is taken to mean monetary, or usability...the later might work. It's an interesting idea. Jeremy
I would say that if you can sell something that people would otherwise get for free, then you have added value. So, pre-compile for a couple of architectures, and then slap them on a CD-ROM with source. Definite tangable value from the CD-ROM then. Dan ------------------------------------------------------------------ Dan Oelke Alcatel Network Systems droelke@aud.alcatel.com Richardson, TX http://spirit.aud.alcatel.com:8081/~droelke/
Daniel R. Oelke (droelke@spirit.aud.alcatel.com) wrote: : > of PGP...would you? : I would use a precompiled version of PGP *if* it came from : and was signed by someone I trusted. : After all - I don't read all the source code - do you? You mean you don't?!!! But seriously, I get it directly from MIT, check the checksums, etc. I'm pretty sure that it hasn't been tampered with. And, actually, I've read a good deal of the source code...especially the rsaref library. Not cause I'm paranoid, just interested. If I get the source code from, say, my friend, who I trust, who got it from someone he trusted, and so on down the line, the line of trust falls into question. Who's to say someone doesn't like someone on that line, and modifies the code...don't you have "friends" you don't like? :) : > And, note, it says sustantial change in value...I don't know if this is taken : > to mean monetary, or usability...the later might work. : > It's an interesting idea. : > Jeremy : > : I would say that if you can sell something that people : would otherwise get for free, then you have added value. : So, pre-compile for a couple of architectures, and then : slap them on a CD-ROM with source. : Definite tangable value from the CD-ROM then. : Dan : ------------------------------------------------------------------ : Dan Oelke Alcatel Network Systems : droelke@aud.alcatel.com Richardson, TX : http://spirit.aud.alcatel.com:8081/~droelke/ -- ____________________________________________________________________________ | Jeremy Rauch .--~~,__ | | | :-....,-------`~~'._.' | jed@cs.jhu.edu | | `-,,, ,_ ;'~U' | alhambra@jhu.edu | | Johns Hopkins _,-' ,'`-__; '--. | jed@jhunix.hcf.jhu.edu | | University (_/'~~ ''''(; | http://server.cs.jhu.edu/~jed | |______________________________________|_____________________________________| Finger for PGP key Member, *the Guild The light that burns twice as bright burns half as long
participants (2)
-
droelke＠spirit.aud.alcatel.com -
jed＠blaze.cs.jhu.edu