From: "James A. Donald" <jamesd@netcom.com>
Date: Wed, 18 Jan 95 10:42:27 PST
To: Duncan <djw@pentagon.io.com>
Subject: Re: 40bit Encryption : Adequate or sadly lacking ?
In-Reply-To: <199501181321.HAA04672@pentagon.io.com>
Message-ID: <Pine.3.89.9501181027.A15911-0100000@netcom10>
MIME-Version: 1.0
Content-Type: text/plain



> There are govt's out there that won't let you import code that is
> "encryption ready". You must prove that your software is tamper proof
> before it can be imported, and tamper proofing means that you can't
> bolt on security. Also, I believe the export laws disallow "plug in"
> security in the US...

Central point software faced this problem.

So they made the encryption features of their product a free
add on, and posted it on bulleting boards with instructions
not to download unless you were an American citizen.

Needless to say these instructions were ignored, surprise 
surprise.

Of course this strategy only works if your product is
useful without encryption, and the add on is of limited
use without your product.

I believe that Kevin Welch decided on this strategy.

 ---------------------------------------------------------------------
We have the right to defend ourselves and our       
property, because of the kind of animals that we  
are.  True law derives from this right, not from    James A. Donald
the arbitrary power of the omnipotent state.        jamesd@netcom.com

               http://www.catalog.com/jamesd/