3 ms·

This is kinda a non-negotiable for them, isn't it? It's not like they suddenly decided to enforce the USG policy and make a big deal about it. IANAL, but it s

by Nrsolis 13y ago

This is kinda a non-negotiable for them, isn't it? It's not like they suddenly decided to enforce the USG policy and make a big deal about it. IANAL, but it seems prudent to acknowledge that the crypto work was done in the USA and therefore falls under the export policy that ALL exportable software falls under. My company has to include this warning on its software and we even have two different versions (domestic and export) to deal with this issue. I know it's unpopular, but why make Docker answer for it? Take it up with the USG if it makes you that unhappy. Better yet, strip out all the non-exportable code, replace it with code written from outside the USA and presto-changes, you've solved a problem for the whole world.

shykes 13y ago
Docker maintainer here. I also hate having to put this in the README (and hate it even more each time someone from Iran offers to contribute... what a waste of talent and energy this policy creates!). But we triple-checked with our legal counsel and they confirmed it's the only way to stay unambiguously out of trouble. As un-tasteful as it is, it's better than causing unnecessary legal trouble for docker contributors down the road. If you're interested in the subject here's an edifying expose of the situation: http://harpers.org/blog/2013/08/andrew-cockburn-on-the-failure-and-ferocity-of-americas-sanctions-programs/ http://harpers.org/blog/2013/08/andrew-cockburn-on-the-failu...
- Myrmornis 13y ago
  Hi, thanks for the answer! I suppose it would be possible, without impacting the legal protection afforded by the notice, to preface the notice with some language indicating that docker would prefer it not to appear in the README, e.g. "unfortunately, due to ...". But in any case, congratulations with all the momentum you've gathered and I'm looking forward to learning more about docker here.
  - shykes 13y ago
    That was the exact purpose of the introductory line "Brought to you courtesy of our legal counsel." :) Coincidentally we just tweaked the language to match Apache and OpenSSL. It's pretty similar, but doesn't specifically name countries - it just refers to "whatever the rules happen to be under US regulation". https://github.com/dotcloud/docker/commit/b48fc9657976091ff3833d340877aa5b761e3969 https://github.com/dotcloud/docker/commit/b48fc9657976091ff3...

by Nrsolis 13y ago

shykes 13y ago

Docker maintainer here. I also hate having to put this in the README (and hate it even more each time someone from Iran offers to contribute... what a waste of talent and energy this policy creates!). But we triple-checked with our legal counsel and they confirmed it's the only way to stay unambiguously out of trouble. As un-tasteful as it is, it's better than causing unnecessary legal trouble for docker contributors down the road. If you're interested in the subject here's an edifying expose of the situation: http://harpers.org/blog/2013/08/andrew-cockburn-on-the-failure-and-ferocity-of-americas-sanctions-programs/ http://harpers.org/blog/2013/08/andrew-cockburn-on-the-failu...

Myrmornis 13y ago
Hi, thanks for the answer! I suppose it would be possible, without impacting the legal protection afforded by the notice, to preface the notice with some language indicating that docker would prefer it not to appear in the README, e.g. "unfortunately, due to ...". But in any case, congratulations with all the momentum you've gathered and I'm looking forward to learning more about docker here.
- shykes 13y ago
  That was the exact purpose of the introductory line "Brought to you courtesy of our legal counsel." :) Coincidentally we just tweaked the language to match Apache and OpenSSL. It's pretty similar, but doesn't specifically name countries - it just refers to "whatever the rules happen to be under US regulation". https://github.com/dotcloud/docker/commit/b48fc9657976091ff3833d340877aa5b761e3969 https://github.com/dotcloud/docker/commit/b48fc9657976091ff3...