home *** CD-ROM | disk | FTP | other *** search
- Newsgroups: alt.security
- Path: sparky!uunet!charon.amdahl.com!netcomsv!netcom.com!strnlght
- From: strnlght@netcom.com (David Sternlight)
- Subject: Re: Please, let's not confuse the issue.
- Message-ID: <1993Jan23.005543.7143@netcom.com>
- Organization: Netcom - Online Communication Services (408 241-9760 guest)
- References: <PCL.93Jan20102914@rhodium.ox.ac.uk> <1993Jan20.182545.23737@Princeton.EDU> <1jovrlINN8d@uwm.edu>
- Date: Sat, 23 Jan 1993 00:55:43 GMT
- Lines: 46
-
- In article <1jovrlINN8d@uwm.edu> rick@ee.uwm.edu (Rick Miller) writes:
- >There's been a thread on alt.security which is misinforming in the extreme.
- >Note the former Subject: line, "Making PGP legal?"... Here's the irony of it:
- >
- > DISTRIBUTING PGP 2.1 IS *NOT* ILLEGAL, as long as folks
- > follow the export laws, and don't *export* it from the US
- > or Canada. Remember that PGP 2.1 was developed outside of
- > the US, and that there are sites like nic.funet.fi which
- > have it available for anonymous ftp. *IMPORTING* PGP 2.1
- > IS STILL LEGAL, even in the US. (Note that some countries
- > may not wish their citizens to *have* cryptologic technology,
- > and import may there be illegal.)
- Without wishing to reopen the discussion of whether it's right or wrong, the
- above statement is factually incorrect. Importing ANY cryptographic system,
- software, flowcharts, etc. is specified under U.S. law as requiring an
- import license. For exact quotation of the regulations, contact Jim Bidzos
- of RSA Data Security.
-
- Since no import license has been granted for PGP 2.1, distributing it in the
- U.S. is distributing of an illegal import.
-
- This is quite separate from any issues of patents.
-
- Let's not repeat the discussion of whether the law is right or wrong, or
- whether one should engage in civil disobedience or not. We need at least to
- know the truth about the legal situation, whether we agree with it or not.
-
-
- > USING PGP 2.1 IS *NOT* ILLEGAL, at least not in any nation
- > I'm familiar with. Yes, in the U.S. it is possible that RSA
- > may take you to court for doing it, but it's not against any
- > *law* to do it. Their only claim against you would be to
- > recover 'damages' to their profits.
-
- Again, this is simply factually incorrect. See above.
-
- There have been a number of messages by others pointing this out, but you
- appear to have missed them. Apologies for the tedious repitition of the
- basic facts, but as long as messages like the above are posted, they need to
- be repeated.
-
- David
- --
- David Sternlight
- RIPEM Public Key on server -- Consider it an envelope for your e-mail
-
-