overly restrictive reading of the EAR [LWN.net]

overly restrictive reading of the EAR

Posted Oct 23, 2003 7:40 UTC (Thu) by cate (subscriber, #1359)
In reply to: overly restrictive reading of the EAR by roelofs
Parent article: Bernstein wins, sort of

IIRC Debian contacted the US government and now every package change (outside non-US section) in Debian will sent a notification to the US government. IIRC it toke time before Debian would be legally able to put criptographic software in main

So, maybe everyone can export open source cryptographic software, but the burocracy is still so high that I whouldn't call freedom.

(Log in to post comments)

overly restrictive reading of the EAR

Posted Oct 23, 2003 13:38 UTC (Thu) by zone (guest, #3633) [Link]

http://www.debian.org/legal/cryptoinmain

It appears you can either notify the BXA when you add a program to the archive that incorporates cryptography, or when you add any new program and specify that cryptographic functionality may be added later. So it's more likely Debian only sends notification when new packages are added to the archive, not for every package change.

And I'm not sure what you mean by too much bureaucracy :-).

overly restrictive reading of the EAR

Posted Oct 23, 2003 15:37 UTC (Thu) by cate (subscriber, #1359) [Link]

Ok. I remembered incorrectly :-(. I was wondering how many notification would send the kernel, (one by every commit?). Thanks for the correction!