httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Brian Behlendorf <>
Subject Re: export restrictions & mirroring Apache at NCSA
Date Thu, 18 May 1995 19:18:18 GMT
On Thu, 18 May 1995, Rob Hartill wrote:
> > Bad News: The NSA (for the state department) has declared release
> > any code you have developed based on those releases must either
> > have the PGP/PEM hooks removed, be licensed through the state
> > department for export on a per user basis, or made available 
> > only in the USA and Canadian.
> Pfffft. Sounds like they've gone overboard on that. The hooks
> don't do any encryption/decryption so what's there problem ?
> Someone here suggested the hooks be converted into a gerneral purpose
> "filter hooks"... that'd take care of those morons at the NSA.

The NSA doesn't even like the ASCII characters "PGP" leaving this 
country.  Fuck them!  Arg, this makes me so furious.  One side of me says 
fuck that, there's no crypto in this program, we're not taking it out, 
and you can bloody seize the machine it's stored on (hyperreal) from my 
bare hands and it won't matter, this code is everywhere you don't want it 
to be (to paraphrase Amex).  

I'll mention this to Brock Meeks and see what he says... 

I have heard something about this before, but I forget the context.  It 
was also a situation where source code was being passed around that 
implemented absolutely no crypto, but had the potential for plugging in 
crypto, and that was deemed a bad thing.  What next, banning the 
distribution of Elm?

The other side is that hardly anyone (that I know of) uses the PGP_AUTH 
stuff anymore.  MarketNet was the only commercial service advertising 
it.  We have talked about security and I think agreed that the long term 
view was to try and develop an SHTTP implementation that didn't contain 
any crypto but linked with Terisa's shttp.a, and that someone would 
develop an alternate shttp.a based on PGP.  

At any rate, I think a nice graphic on our home page would be cool:


--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--  http://www.[hyperreal,organic].com/

View raw message