3 ms·

> * In the 1990s, strong encryption was called a 'munition' and export was restricted. That turned out to be impractical (it was available in many countries and

> * In the 1990s, strong encryption was called a 'munition' and export was restricted. That turned out to be impractical (it was available in many countries and the Internet has no borders), morally questionable (restricting private citizen's privacy), and it fell apart. IIRC, thats still on the books. Its just one of those sleeping paragraphs since the PGP release.

tedunangst 10y ago
The book in question: https://www.bis.doc.gov/index.php/policy-guidance/encryption https://www.bis.doc.gov/index.php/policy-guidance/encryption
avian 10y ago
Debian documents mention that "BXA revised the provisions of the EAR governing cryptographic software" in October 2000. Debian no longer has separate non-us repositories for crypto because of that. https://www.debian.org/legal/cryptoinmain https://www.debian.org/legal/cryptoinmain
- makomk 10y ago
  Open source software is now basically exempt from the crypto export restrictions, which is why Debian doesn't need separate non-US repositories for it anymore. As far as I know closed-source software is still restricted.
jeff_marshall 10y ago
Only "Military or intelligence cryptographic (including key management) systems" are included in the current US munitions list [1]. Everything else is handled by the Department of Commerce as part of the export administration regulations (EAR) [2]. [1]https://www.pmddtc.state.gov/regulations_laws/documents/official_itar/2014/ITAR_Part_121.pdf https://www.pmddtc.state.gov/regulations_laws/documents/offi... [2] https://www.bis.doc.gov/index.php/policy-guidance/encryption https://www.bis.doc.gov/index.php/policy-guidance/encryption
chetanahuja 10y ago
"it was available in many countries and the Internet has no borders" Ummm... tell that to the Chinese or anyone, anywhere in the world trying to watch the complete international Netflix catalog. And as for VPNs, they're like the tunnels under the actual physical borders which are also not impenetrable.

tedunangst 10y ago

The book in question: https://www.bis.doc.gov/index.php/policy-guidance/encryption https://www.bis.doc.gov/index.php/policy-guidance/encryption

avian 10y ago

Debian documents mention that "BXA revised the provisions of the EAR governing cryptographic software" in October 2000. Debian no longer has separate non-us repositories for crypto because of that. https://www.debian.org/legal/cryptoinmain https://www.debian.org/legal/cryptoinmain

makomk 10y ago
Open source software is now basically exempt from the crypto export restrictions, which is why Debian doesn't need separate non-US repositories for it anymore. As far as I know closed-source software is still restricted.

jeff_marshall 10y ago

Only "Military or intelligence cryptographic (including key management) systems" are included in the current US munitions list [1]. Everything else is handled by the Department of Commerce as part of the export administration regulations (EAR) [2]. [1]https://www.pmddtc.state.gov/regulations_laws/documents/official_itar/2014/ITAR_Part_121.pdf https://www.pmddtc.state.gov/regulations_laws/documents/offi... [2] https://www.bis.doc.gov/index.php/policy-guidance/encryption https://www.bis.doc.gov/index.php/policy-guidance/encryption

chetanahuja 10y ago

"it was available in many countries and the Internet has no borders" Ummm... tell that to the Chinese or anyone, anywhere in the world trying to watch the complete international Netflix catalog. And as for VPNs, they're like the tunnels under the actual physical borders which are also not impenetrable.