Re: [LINUX5250] BXA export notification

[Steve Fox <drfickle@xxxxxxxxxx>]

On Wed, 2001-12-12 at 16:34, Steve Fox wrote:
> On Wed, 2001-12-12 at 16:11, Scott Klement wrote:
> >
> > I'm not a lawyer, nor do I have one that I can ask.  Does anyone have
> > access to a lawyer that this could be run past?   I'd hate to have to
> > hire one for the purposes of free software...
>
> I can give it a shot, but I can't promise a fast response...IBM lawyers
> take forever to do anything ;0)

I went ahead and asked about this. I asked:

"If an Open Source project dynamically links to an encryption library
(OpenSSL), even though there is no encryption in the project itself,
does that mean the project has to be classified as an encryption
product? In other words, does it need to be reported to Bureau of Export
Administration at
http://www.bxa.doc.gov/Encryption/PubAvailEncSourceCodeNofify.html ?"

and the response I got was:

"No. We're not required to do anything special for open source code as
long as it doesn't contain cryptography."

All standard disclaimers apply...this is not an official legal
statement, yadda, yadda, yadda.

But I think that Scott was going to do it anyways. So no big deal if the
form was easy to fill out. Just thought I'd follow up.

--

Steve Fox
IBM Linux Technology Center
http://www.ibm.com/linux/ltc
http://k-lug.org