Re: [cryptography] Interesting Webcrypto question

2013-03-04 Thread Taral
On Mon, Mar 4, 2013 at 12:31 PM, Jeffrey Walton wrote: > Actually, its not too far fetched. In the mobile arena, I see a number > of in-house browser based apps that can be side-loaded or distributed > through a private or enterprise application store. When using these > distribution channels, scr

Re: [cryptography] Interesting Webcrypto question

2013-03-04 Thread Jeffrey Walton
On Mon, Mar 4, 2013 at 3:10 PM, Peter Thoenen wrote: > I'm catching up on this but it's a pretty easy answer. > >> Say you've implemented a bunch of crypto on your web page via Javascript. > > And this is where you went wrong. Don't implement crypto (or anything of > import) client side period (

Re: [cryptography] Interesting Webcrypto question

2013-03-04 Thread Peter Thoenen
I'm catching up on this but it's a pretty easy answer. > Say you've implemented a bunch of crypto on your web page via Javascript. And this is where you went wrong.  Don't implement crypto (or anything of import) client side period (if we are talking web based javascript stuff here). -Peter __

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread James A. Donald
On 2013-03-04 8:10 AM, Arshad Noor wrote: I also agree that all this seems irrelevant considering that everyone has access to strong crypto in one form or another; but, even a stupid law is still the law. Much though we long for the glory days when cypherpunks actually were a persecuted minor

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread coderman
On Sun, Mar 3, 2013 at 12:29 PM, Open eSignForms wrote: > The entire idea that such countries don't have strong crypto because of the > export restrictions is goofy. this can be shorted to: "export restrictions [are] goofy" in the last decade the crypto export hassles i have experienced are arou

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread James A. Donald
On 2013-03-04 11:09 AM, Patrick Mylund Nielsen wrote: Say what you will about the semi-morbid posthumous inflation of Aaron Swartz contributions and stature, but don't pretend to know what he thought I know what Wallace thought and Wallace was evil, insane, and suicidal. Swartz described him

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread Patrick Mylund Nielsen
> It is a good thing that Swartz killed himself, like his hero Wallace. Both of them needed killing. This is the stupidest thing I have read in a long time. Shut the fuck up. > It is Jewish leftists like Rahm Israel Emanuel that seek the destruction of Israel. Israel is disliked in most countrie

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread James A. Donald
On 2013-03-04 8:48 AM, Jeffrey Walton wrote: Little folks like me have to play by the rules, or risk getting the Schwartz treatment from folks like Steve Heymann and Carmen Ortiz. No, we don't have to play by these rules, which our rulers have pretty much forgotten about. Swartz penetrated the

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread Jeffrey Walton
On Sun, Mar 3, 2013 at 6:43 PM, Adam Back wrote: > ... > > It does make a lot of sense not to sell embargoed countries physical > weaponry. (I guess unless the West has just flip-flopped sides on the > embargoed country and the newly installed dictator is now "our" dictator, > then the mil-indust

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread Adam Back
The realism of export restricting open source software is utterly ludicrous. Any self-declaration click-through someone might implement can be clicked through by anyone, from anywhere, and I presume someone from an embargoed country is more worried about their own countries laws than US laws, to

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread Jeffrey Walton
On Sun, Mar 3, 2013 at 4:41 PM, Adam Back wrote: > Unless you're selling SSL MITM boxes to tyrants & dictators, then of course > its alright ;) Well maybe they'll turn a blind eye if the West is propping > up that particular tyrant until they flip flop. > > Anyway wasnt all that US export of crypt

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread Peter Gutmann
Arshad Noor writes: >Open-source crypto that is downloadable from public-sites has a special >designation in the EAR; you only need to notify the BIS and provide the >download URL. Controls for export to the T countries override the 5D002 exception. In other words there's an exception to the e

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread Arshad Noor
On 03/03/2013 01:41 PM, Adam Back wrote: Dont tell me you still think you need permission to export RSA in perl to non-embargoed entities: Open-source crypto that is downloadable from public-sites has a special designation in the EAR; you only need to notify the BIS and provide the download U

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread Adam Back
Unless you're selling SSL MITM boxes to tyrants & dictators, then of course its alright ;) Well maybe they'll turn a blind eye if the West is propping up that particular tyrant until they flip flop. Anyway wasnt all that US export of crypto code nonsense tidied up a decade or so ago? PRZ did not

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread Jeffrey Walton
On Sun, Mar 3, 2013 at 3:18 PM, Arshad Noor wrote: > On 03/03/2013 11:34 AM, Paul Hoffman wrote: >>> >>> You've now exported crypto to a restricted country. What happens next? >> >> >> You ask a lawyer or a legislator, not a bunch of amateurs in the subject? >> > > +1 > > As someone who personall

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread Arshad Noor
On 03/03/2013 11:34 AM, Paul Hoffman wrote: You've now exported crypto to a restricted country. What happens next? You ask a lawyer or a legislator, not a bunch of amateurs in the subject? +1 As someone who personally reviewed hundreds of pages of EAR rules, applied for and received Licens

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread Open eSignForms
The entire idea that such countries don't have strong crypto because of the export restrictions is goofy. ___ cryptography mailing list cryptography@randombit.net http://lists.randombit.net/mailman/listinfo/cryptography

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread Peter Gutmann
Paul Hoffman writes: >> You've now exported crypto to a restricted country. What happens next? > >You ask a lawyer or a legislator, not a bunch of amateurs in the subject? Have you tried asking a lawyer or legislator? Would you say the look you got in response was more deer-in-headlights, or c

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread Paul Hoffman
> You've now exported crypto to a restricted country. What happens next? You ask a lawyer or a legislator, not a bunch of amateurs in the subject? --Paul Hoffman ___ cryptography mailing list cryptography@randombit.net http://lists.randombit.net/mailma

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread dan
> You've now exported crypto to a restricted country. What happens next? repl{"physicist", "javascripter", "In some sort of crude sense, which no vulgarity, no humor, no overstatement can quite extinguish, the physicists have known sin; and this is a knowledge which they cannot los

Re: [cryptography] Interesting Webcrypto question

2013-03-03 Thread coderman
On Sun, Mar 3, 2013 at 1:39 AM, Peter Gutmann wrote: > Say you've implemented a bunch of crypto on your web page via Javascript. > > Someone in North Korea (or Iran, or one of the other export-restricted > nations) visits your site. > > You've now exported crypto to a restricted country. What hap

[cryptography] Interesting Webcrypto question

2013-03-03 Thread Peter Gutmann
Say you've implemented a bunch of crypto on your web page via Javascript. Someone in North Korea (or Iran, or one of the other export-restricted nations) visits your site. You've now exported crypto to a restricted country. What happens next? Peter.