[1360] in WWW Security List Archive
Re: Digest Authentication
daemon@ATHENA.MIT.EDU (Allan M. Schiffman)
Sat Dec 30 22:08:02 1995
Date: Sat, 30 Dec 1995 16:36:31 -0800
To: Andrew Cameron <andrew@andy.alt.za>
From: ams@terisa.com (Allan M. Schiffman)
Cc: http-wg@cuckoo.hpl.hp.com, www-security@ns2.rutgers.edu
Errors-To: owner-www-security@ns2.rutgers.edu
On Sat, 30 Dec 1995, Andrew Cameron wrote:
>Will this be available to people outside the US, or will the ITAR
>regulations mean that only those in the US can legally use it.
Putting Albert Lunde's point more emphatically: since Digest Access
Authentication does not provide confidentiality (doesn't use encryption)
it doesn't fall under ITAR at all.
-Allan
