Fellow PMC members, the Apache board sent me a note recently which included this paragraph: << For the coming board report, the board and legal committee would much appreciate your project reviewing the crypto export policy spelled out at http://www.apache.org/dev/crypto.html to determine that the project either either no encryption considerations, or if notices must be (or had been) sent to the BIS and NSA, they have been documented at the official location http://www.apache.org/licenses/exports/ for all encryption elements within the oversite of this PMC. Adding a status item on the board report will help the legal committee to ensure this oversight has been applied across the foundation. >>
I am not aware of any part of Xalan, either source code, or binaries that we distribute, that have any cryptographic code. Do you PMC members concur on that? Please take this into consideration and respond on this mailing list, hopefully within a few days. Thanks, - Brian Minchau