At 07:14 PM 3/16/00 +0100, you wrote:
>Ben Laurie wrote:
>> 
>> Eben Moglen wrote:
>> > In the worst case analysis, components exported
>> > now might subsequently become non-exportable in the event that
>
>> Perhaps I'm failing to understand here ... you say "No code not
>> originally developed in the US would be subject to..." but sure we're
>> talking about code that _was_ developed inside the US.
>
>Indeed. 
>If some code in open source project has been developed in the USA, then
>we must keep a trace of where it is to be able to remove it later in
>case the regulation in the US become more restrictive.
>
>So it does not propagate in the meaning that the european code never
>becomes unexportable, but in order to take advantage of that, we need to
>be able to "clean" it and remove all the american code in it at the
>moment we need to.

This effectively makes US supplied code unusable for OpenSSL except in the
form of "optional modules" that are, by nature, removable. The point seems
to be that US citizens can not involve themselves in regular development
for international development projects without infecting the projects with
US (re)exportation jurisdiction and controls. (Well exportation goes
without saying, but re-exportation is the relevant bit here I think - if
I've not missed the point by too far).

Please correct me if I've got it all mangled up ... :-)

Cheers,
Geoff



______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to