From: Jeff Weinstein <jsw@netscape.com>
Date: Thu, 25 Jan 1996 13:15:05 +0800
To: "Timothy C. May" <tcmay@got.net>
Subject: Re: Crippled Notes export encryption
In-Reply-To: <ad2b4efa0102100435ee@[205.199.118.202]>
Message-ID: <310612A1.69E7@netscape.com>
MIME-Version: 1.0
Content-Type: text/plain


-- Timothy C. May wrote:
> 
> At 9:29 AM 1/24/96, Jeff Weinstein wrote:
> 
> >  I suspect that to get around the US government in this way we
> >would have to develop the entire product outside of the US.  That
> >would be a very drastic move that is not likely to happen any
> >time soon.  We are going to invest some money and effort into
> >trying to get the current restrictions lifted first.
> 
> For what it's worth, this is what I've heard several knowledgeable lawyers
> say is the case, that merely sending the crypto experts abroad is no
> solution, that the entire product (or some large fraction of it) must be
> foreign-originated.
> 
> The usual issue: That if a foreign-originated product even appears to be a
> standard (so far, none have been), and includes strong crypto, then the NSA
> and other agencies will simply change the rules. Thus, if extremely strong
> crypto from "Netscape-Zurich" starts to have a significant market presense
> in the U.S., then some law will be passed to restrict it.

  Another problem is that the government may consider any "help" provided
to the foreign entity to be evidence of a conspiracy.  When Eric Young
released SSLEAY we got a call from someone in the State Department
(probably some lackey paid for by the NSA) to find out if we provided
him with any "help" in doing his implementation.  Since he did it all
on his own from the published spec and was able to test interoperability
over the internet we were off the hook, but they seemed to be prepared
to come down on us if we had "conspired" with him.

	--Jeff

Jeff Weinstein - Electronic Munitions Specialist
Netscape Communication Corporation
jsw@netscape.com - http://home.netscape.com/people/jsw
Any opinions expressed above are mine.