www-legal-discuss mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Gilles Scokart" <gscok...@gmail.com>
Subject Re: ECCN questions, again, this time Ant (and sub project)
Date Wed, 10 Oct 2007 11:08:02 GMT
And what about the fact that jsch has probably no ECCN ?  Is it enought to
check that jsch fall under the 5D002 criteria, or do we have to ask them
notify the US Government?

Gilles


2007/10/10, Stefan Bodewig <bodewig@apache.org>:
>
> On Tue, 9 Oct 2007, Justin Erenkrantz <justin@erenkrantz.com> wrote:
> > On Oct 9, 2007 9:30 PM, Stefan Bodewig <bodewig@apache.org> wrote:
>
> >> The other point is that "What are examples of when a crypto item is
> >> publicly accessible through ASF servers?" still really didn't help
> >> us.  Apart from the ssh task we might have other tasks that need to
> >> be listed.
> >
> > If we write and/or distribute the SSH task and that depends on jsch,
> > then that task falls under the ECCN requirement.  (The analogy here
> > is C code that uses OpenSSL must be declared.)  But, the
> > notification doesn't need to subdivide it out - just list Ant and
> > any crypto dependencies and all should be well.
>
> OK, so I'll initially only list jsch.
>
> Thanks
>
>         Stefan
>
> ---------------------------------------------------------------------
> DISCLAIMER: Discussions on this list are informational and educational
> only.  Statements made on this list are not privileged, do not
> constitute legal advice, and do not necessarily reflect the opinions
> and policies of the ASF.  See <http://www.apache.org/licenses/> for
> official ASF policies and documents.
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
> For additional commands, e-mail: legal-discuss-help@apache.org
>
>


-- 
Gilles SCOKART

Mime
View raw message