export of openssl from US _is_ legal

export of openssl from US _is_ legal

[Luke Kenneth Casson Leighton]

dear ecos maintainers,

your web site incorrectly says that the openssl port cannot be
hosted on a US server.

open source projects _can_ be exported from the US.

what you need to do is to inform the US government of _where_
the software can be obtained from.

you need to do some research in order to find out the exact details.

l.

-- 
-- 
expecting email to be received and understood is a bit like
picking up the telephone and immediately dialing without
checking for a dial-tone; speaking immediately without listening
for either an answer or ring-tone; hanging up immediately and
then expecting someone to call you (and to be able to call you).
--
<a href="http://lkcl.net">      lkcl.net      </a> <br />
<a href="mailto:lkcl@lkcl.net"> lkcl@lkcl.net </a> <br />

Re: export of openssl from US _is_ legal

[Andrew Lunn]

On Tue, Jan 13, 2004 at 04:42:44PM +0000, Luke Kenneth Casson Leighton wrote:
> dear ecos maintainers,
> 
> your web site incorrectly says that the openssl port cannot be
> hosted on a US server.
> 
> open source projects _can_ be exported from the US.
> 
> what you need to do is to inform the US government of _where_
> the software can be obtained from.
> 
> you need to do some research in order to find out the exact details.

Sure, it can be done. The generic OpenSSL package does it, cygwin does
it. But as far as i know, its APITA to sort out. 

Also, how long before the US government changes there mind and adds
new restrictions? Its safe to simply host is somewhere with more
freedom and avoid all this bother.

     Andrew

Re: export of openssl from US _is_ legal

[Luke Kenneth Casson Leighton]

On Tue, Jan 13, 2004 at 05:49:55PM +0100, Andrew Lunn wrote:
> On Tue, Jan 13, 2004 at 04:42:44PM +0000, Luke Kenneth Casson Leighton wrote:
> > dear ecos maintainers,
> > 
> > your web site incorrectly says that the openssl port cannot be
> > hosted on a US server.
> > 
> > open source projects _can_ be exported from the US.
> > 
> > what you need to do is to inform the US government of _where_
> > the software can be obtained from.
> > 
> > you need to do some research in order to find out the exact details.
> 
> Sure, it can be done. The generic OpenSSL package does it, cygwin does
> it. But as far as i know, its APITA to sort out. 

 from what i understand, the notification - send an email - is
 sufficient.

> Also, how long before the US government changes there mind and adds
> new restrictions? 

 cater for that by providing a non-us mirror?

> Its safe to simply host is somewhere with more
> freedom and avoid all this bother.
 
 :)
 
 good!

 l.

Re: export of openssl from US _is_ legal

[Jonathan Larmour]

Luke Kenneth Casson Leighton wrote:
> On Tue, Jan 13, 2004 at 05:49:55PM +0100, Andrew Lunn wrote:
> 
>>On Tue, Jan 13, 2004 at 04:42:44PM +0000, Luke Kenneth Casson Leighton wrote:
>>
>>>dear ecos maintainers,
>>>
>>>your web site incorrectly says that the openssl port cannot be
>>>hosted on a US server.
>>>
>>>open source projects _can_ be exported from the US.
>>>
>>>what you need to do is to inform the US government of _where_
>>>the software can be obtained from.
>>>
>>>you need to do some research in order to find out the exact details.
>>
>>Sure, it can be done. The generic OpenSSL package does it, cygwin does
>>it. But as far as i know, its APITA to sort out. 
> 
> 
>  from what i understand, the notification - send an email - is
>  sufficient.

 From our discussions with lawyers who claimed to be experts on this, it 
unfortunately isn't that simple. It would be even harder to integrate it 
into CVS due to the terms of the BAXA rules on notification, so it de 
facto has to remain in an EPK anyway. Hosting it on a server outside the 
US rather than inside the US doesn't really lose us anything.

>>Also, how long before the US government changes there mind and adds
>>new restrictions? 
> 
>  cater for that by providing a non-us mirror?

Then people have to be told, links changed and invalidated, blahblah :-).

Jifl
-- 
eCosCentric    http://www.eCosCentric.com/    The eCos and RedBoot experts
--["No sense being pessimistic, it wouldn't work anyway"]-- Opinions==mine

Re: export of openssl from US _is_ legal

[Luke Kenneth Casson Leighton]

On Tue, Jan 13, 2004 at 07:56:39PM +0000, Jonathan Larmour wrote:
> >>it. But as far as i know, its APITA to sort out. 
> >
> >
> > from what i understand, the notification - send an email - is
> > sufficient.
> 
> From our discussions with lawyers who claimed to be experts on this, it 
> unfortunately isn't that simple. It would be even harder to integrate it 
> into CVS due to the terms of the BAXA rules on notification, so it de 
> facto has to remain in an EPK anyway. 

 *wide-eyed* - oo.

 pleased that you have access to lawyers!