Date: Thu, 27 Jan 2000 13:10:30 -0800 From: "H. Peter Anvin" <email@example.com> To: firstname.lastname@example.org, email@example.com, firstname.lastname@example.org Subject: kernel.org cryptographic policy change scheduled for 2000-02-14 22:00 Dear friends, After extensive consultations with our legal counsel, we believe that we have found a reasonable method of supporting cryptography on kernel.org. Consequently, the following change in kernel.org policy will take effect Monday Feb 14, 2000 at 22:00 UTC (14:00 PST, 17:00 EST, 23:00 MET) *UNLESS OTHERWISE IS INDICATED BEFORE THEN* (in case the situation changes.) a) Cryptographic Open Source software will be permitted on kernel.org. For binaries, *the source must be available on kernel.org*. This will need to be strictly enforced, so contributors, please stick to this rule. b) We can no longer support official mirrors in the following countries, or allow other official mirrors to be listed as supporting them: Afghanistan, Cuba, Iran, Iraq, Libya, North Korea, Sudan, Syria or Yugoslavia. (The situation with Yugoslavia is a bit tricky, since the regs only apply to Serbia, specifically. If we end up having someone wanting to set up a Montenegrine mirror, we'll deal with it then.) c) The following legal notice will apply to all users of kernel.org: "Some of the software on this site is capable of encryption and therefore is regulated as encryption software by the United States Government under the U.S. Export Administration Regulations ("EAR"). Anyone requesting or receiving such software agrees to comply with the EAR, and also acknowledges (1) that the software cannot be exported without a license or other authorization from the United States Government and (2) that the software is not intended for use by any foreign (non-U.S.) government." Obviously, this is all pretty silly, but that's really the best we can do. This is government stupidity we're dealing with. I would like to especially apologize to our one Yugoslavian mirror for having to cut you off. I really tried to find a way around it. If you have any issues with this policy change, please contact me privately. Sincerely, H. Peter Anvin -- <email@example.com> at work, <firstname.lastname@example.org> in private! "Unix gives you enough rope to shoot yourself in the foot."