Re: Exportable cipher suite
On Fri, 16 Feb 2001, Patrick Li wrote: Thanks for the information. Does that mean there is no longer restrictions on using any of the cipher suites specified by TLS or SSL outside of the US? Sorry for a simple question. But is it still the case that only Canada and US are allowed to use browers with 128 bit encryption strength? Who is the party who would allow one nation but not another to use an algorithm, and punish infractions? You should check with local laws at the point of use to find out what you are permitted to *use*. The U.S. once had rather severe restrictions on what encryption *products* could be *exported*, but citizens could *use* whatever would work so long as they didn't try to send the software *itself* out of the country. (One exception is amateur radio, which used to be *heavily* restricted as to the nature of the signal used to modulate the carrier. This was many years ago, and I don't know the current situation.) The U. S. still maintains a pretense of regulation, though it is very much relaxed. You should get advice from an attorney with experience in export law before attempting to export from the U.S. or Canada any given technology for secure communication. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Make a good day. __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Exportable cipher suite
Hi, Can someone explain what does exportable cipher suite mean? The man page of openssl ciphers "EXPORT" says it returns all the export encryption algorithms. Including 40 and 56 bits algorithms. But does that mean those ciphers suites are legal to use outside of United States? Thanks Patrick __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: Exportable cipher suite
Can someone explain what does exportable cipher suite mean? It means "at the time EXPORT was defined, it was ciphers that were legal to export outside of the US." Actually, in practice it really meant what ciphers were supported by browsers exported from the US. Unless you have a large installed base of old browsers (1 year), ignore it; export no longer has any meaning right now. /r$ __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: Exportable cipher suite
Thanks for the information. Does that mean there is no longer restrictions on using any of the cipher suites specified by TLS or SSL outside of the US? Sorry for a simple question. But is it still the case that only Canada and US are allowed to use browers with 128 bit encryption strength? Patrick - Original Message - From: Rich Salz [EMAIL PROTECTED] To: Patrick Li [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Friday, February 16, 2001 12:11 PM Subject: Re: Exportable cipher suite Can someone explain what does exportable cipher suite mean? It means "at the time EXPORT was defined, it was ciphers that were legal to export outside of the US." Actually, in practice it really meant what ciphers were supported by browsers exported from the US. Unless you have a large installed base of old browsers (1 year), ignore it; export no longer has any meaning right now. /r$ __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: Exportable cipher suite
Patrick Li wrote: Thanks for the information. Does that mean there is no longer restrictions on using any of the cipher suites specified by TLS or SSL outside of the US? There never were restrictions on _using_ them, only on exporting. Sorry for a simple question. But is it still the case that only Canada and US are allowed to use browers with 128 bit encryption strength? That has never been the case. Cheers, Ben. -- http://www.apache-ssl.org/ben.html "There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit." - Robert Woodruff __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
