3 ms·
It is true. There are a lot of exemptions, and not all uses of HTTPS require export registration. However, if your app's main purpose has anything to with inf
by metafunctor 11y ago
It is true. There are a lot of exemptions, and not all uses of HTTPS require export registration.
However, if your app's main purpose has anything to with information security or sending/receiving/storing information, then you probably need ERN.
- NamTaf 11y agoDefine information, since information traditionally is just the meaningful analysis of some data.
- metafunctor 11y agoIt's whatever they mean by that word here: http://www.bis.doc.gov/index.php/policy-guidance/encryption/identifying-encryption-items#Three http://www.bis.doc.gov/index.php/policy-guidance/encryption/... If you're not sure, and don't want to risk it, either do the ERN or get a lawyer to tell you it's not needed.
- NamTaf 11y agoI'm not disagreeing with you, I'm pointing out that querying a RESTful page with any of the C, R or U parts of the CRUD process would involve transacting information, so you basically need to keep it as HTTP. And that's why it's madness.
- metafunctor 11y agoI don't disagree with you, either. But I'm pretty sure the legislative intent is to be able to thwart encryption in, say, instant messaging apps. Because terrorism, national security, etcetera. I don't agree with the means (it's futile), but being able to wiretap communications between people is the intent here as far as I can tell. It's quite simple to implement an instant messaging app on top of CRUD, so "it's just CRUD" is not a valid counter against this type of politics.
- NamTaf 11y agoI understand the intent, my point is that there's very few situations where you are not transmitting information if you have any connectivity whatsoever, so the law appears overly ambiguous and far-reaching. It should be more specific about its aims.