Hi Dave,

The board reports for Feb [1]  and Mar [2] 2008 have lots of examples.

See the mail with subject "[ALL PMC CHAIRS] Export Notification policy" for details of what's needed. Basically, if there is any code in Roller that either implements encryption or uses encryption features of a third party library, then Roller needs to declare itself to use encryption technology.

If it can't be done by Monday, should put into the board report something like "Export Notification policy review is underway" and then underway it.

OpenJPA doesn't use encryption technology and reported this in April.

Craig

[1] 
http://www.apache.org/foundation/records/minutes/2008/board_minutes_2008_02_20.txt
[2] 
http://www.apache.org/foundation/records/minutes/2008/board_minutes_2008_03_19.txt

On May 17, 2008, at 11:11 AM, Dave wrote:

On Sat, May 17, 2008 at 2:03 PM, Craig L Russell <[EMAIL PROTECTED] > wrote:
A few months ago, the board asked for an analysis of all PMCs for encryption
technology used in projects.

I didn't see the analysis for Roller in the Feb board report and it's not in
May's report (yet).


Hi Craig,

Thanks for pointing that out.
Can you point to an example analysis, e.g. did OpenJPA do one?

- Dave



Here's what I have so far: http://cwiki.apache.org/confluence/x/1E4B

Craig Russell
Architect, Sun Java Enterprise System http://java.sun.com/products/jdo
408 276-5638 mailto:[EMAIL PROTECTED]
P.S. A good JDO? O, Gasp!

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to