[6132] in cryptography@c2.net mail archive
RE: draft regulations?
daemon@ATHENA.MIT.EDU (Rodger, William)
Wed Nov 24 16:50:30 1999
From: "Rodger, William" <wrodger@usatoday.com>
To: William Allen Simpson <wsimpson@greendragon.com>, cryptography@c2.net
Date: Wed, 24 Nov 1999 16:26:22 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----_=_NextPart_000_01BF36C1.A9448EB6"
Message-Id: <19991124211109.3EB275E67@smtpgate.gannett.com>
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
------_=_NextPart_000_01BF36C1.A9448EB6
Content-Type: text/plain;
charset="iso-8859-1"
Based on a conversation I had with Commerce Undersecretary William Reinsch
last night, as well as other crypto-savvy attorneys, I think it's probably
more useful to look at the first page of the draft. Open Source code,
believe it or not, would be essentially decontrolled by this proposal.
The draft starts thus:
"740.13 TECHNOLOGY AND SOFTWARE UNRESTRICTED (TSU)
"This License Exception authorizes exports and re-exports of operation
technology and software; sales technology and software; software updates
(bug
fixes); and "mass market" software subject to the General Software Note;
and
non-commercial encryption source-code. Note that encryption software is
no
longer subject to the General Software Note (see paragraph (d)(2) of this
section). "
(verbiage regarding the definition of mass-market software snipped)
It then includes the following as eligible for export:
"(1) Encryption source code controlled under 5D002 which would be
considered publicly available under Section 734.3(b)(3) and which is not
subject to any proprietary commercial agreement or restriction is released
from EI controls and may be exported or re-exported without review under
License Exception TSU, provided you have submitted to BXA notification of
the
export, accompanied by the Internet address (e.g. URL) or copy of the
source
code by the time of export. Submit the notification to BXA and send a
copy
to ENC Encryption Request Coordinator (see Section 740.17(g)(5) for
mailing
addresses). "
Now, telling the govt. what you're up to at the time you do it isn't exactly
free speech. But these regs were included _specifically_ to allow the export
of Open Source software. If you're looking for someone to thank or blame,
you should talk to Netscape, who wanted this badly for its Open Source
Mozilla effort. My sources tell me they were particularly concerned that MS
could ship its browser almost anywhere while they sat on the sidelines. So
why wasn't this mentioned back in September when they unveiled the plan?
Simple: they hadn't thought of it.
http://www.usatoday.com/life/cyber/tech/ctg734.htm
Will
> -----Original Message-----
> From: William Allen Simpson [mailto:wsimpson@greendragon.com]
> Sent: Wednesday, November 24, 1999 11:56 AM
> To: cryptography@c2.net
> Subject: Re: draft regulations?
>
>
>
>
> "Steven M. Bellovin" wrote:
> > > I was about to make a snide comment that they're just
> endorsing open source
> > software -- but is there any definition of "other
> restriction"? Does the GPL
> > count? Are they trying to ban any publication of anything
> that isn't flat-out
> > public domain? And if something is flat-out public domain,
> how can the
> > "exporter" impose the viral restrictions? For that matter,
> what is "export"?
> > Posting something to Usenet? Putting it up on a Web page
> or FTP server? The
> > act of downloading it?
> >
> These are excellent questions.
>
> I think the GPL counts. I think that BSD counts. I have no idea how
> the exporter imposes the viral restrictions, but I suspect that it
> could result in prosecution -- "a compare shows this line of code is
> identical to that line of US origin code, guilty as charged."
>
>
> "Salz, Rich" wrote:
> > I think they want to make sure that if some non-US package
> > (openssl being the example most obvious to me) picks it up
> > that it doesn't suddenly become "free." So it's not the GPL,
> > really, but more like the old BSD license.
> > /r$
> What I meant is, I'd like to contribute code to FreeSWAN, or OpenSSL,
> or whatever, but the inclusion of a single line of my code will make
> the entire thing subject to EAR regulation. Worse, a single line of
> code that "looks" like a line I published will subject the
> whole thing
> to regulation. Means we cannot publish _anything_ for fear
> of damaging
> the efforts of our freinds. Not good.
>
> WSimpson@UMich.edu
> Key fingerprint = 17 40 5E 67 15 6F 31 26 DD 0D B9 9B
> 6A 15 2C 32
>
------_=_NextPart_000_01BF36C1.A9448EB6
Content-Type: application/ms-tnef
Content-Transfer-Encoding: base64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==
------_=_NextPart_000_01BF36C1.A9448EB6--
