CDR: export reg timewarp? (Re: RC4 source as a literate program)

[James A. Donald]

     --
At 11:54 AM 9/3/2000 -0400, Adam Back wrote:
 > The US export regulations no longer prevent export of crypto.
 > PGPexported binary copies of PGP from US websites, as now do many
 > other companies.  Crypto source is exported also from numerous web
 > sites.

Because the law is still unclear and ambiguous, and the government likes to 
keep it that way.

A plausible interpretation of current legislation, court decisions, 
regulations, and observed practice by enforcement agencies, is that code 
with public source code may be freely exported, and code with secret source 
code may be exported provided the government first gets to know all the 
weaknesses you are hiding from the public.

However the government could decide tomorrow that what we thought the law 
is, is not actually the law, and we are all going to jail.

     --digsig
          James A. Donald
      6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG
      rfi1pubCBFZOwR01VuZcfDdQx9XBa2LJRDuMEIws
      4K2OgqaKgCp+9BWcwwXv0EITlnD3DomQOZ5ZY9lVT