Re: Encryption Export Legality

From: Luc The Perverse (sll_noSpamlicious_z_XXX_m_at_cc.usu.edu)
Date: 07/28/05 

Date: Thu, 28 Jul 2005 00:35:32 -0600

"Matt Mahoney" <matmahoney@yahoo.com> wrote in message
news:1122501339.225109.9790@g14g2000cwa.googlegroups.com...
> Luc The Perverse wrote:
>> "Unruh" <unruh-spam@physics.ubc.ca> wrote in message
>> news:dc7s6i$3c0$1@nntp.itservices.ubc.ca...
>> > "John E. Hadstate" <jh113355@hotmail.com> writes:
>> >
>> >
>> >>"Luc The Perverse" <sll_noSpamlicious_z_XXX_m@cc.usu.edu>
>> >>wrote in message
>> >>news:42e70777$0$58159$3a2ecee9@news.csolutions.net...
>> >>> Hi, I'd like to put a "Send me an encrypted message"
>> >>> applet on my webpage.
>> >>>
>> >>> Can I do that? Do I need an eight page long contract that
>> >>> says, if you are not US then you can't use this?
>> >>>
>> >
>> >>http://www.bxa.doc.gov/Encryption/Default.htm
>> >
>> > There are to my knowledge no laws in the USA or Canada which
>> > limit
>> > in
>> > anyway the sending or receiving of encrypted messages from
>> > anywhere
>> > in the
>> > world (mind you the broad powers under Homeland security might
>> > limit this).
>> > It is the export of encryption products-- ie things which can do
>> > the
>> > encryption -- which are limited.
>> > Now, what you mean by "applet I do not know., If you mean that
>> > applet will
>> > do the encryption, then you will be exporting it if somone from
>> > outside the
>> > USA uses it (since applets run on the remote system not yours).
>>
>>
>> Exactly! But I could make the applet open source, and have the
>> source be available.
>
> Why don't you set up an https server where someone can send you
> mail by
> typing into a text box and/or uploading a file? The message is
> encrypted in transit to your server and you don't have to export
> (or
> write) any encryption software.

Cause that has been done . . it's called hotmail.

And anyway . . it doesn't sound very fun.

Ok here's what I want to do some day when I am bored.

I will take the Gnu GP algorithm and replace RSA with blowfish.
(Blowfish toutes itself as a drop in replacement for RSA anyway.)

Now that I have spoken my idea, I will no doubt get flamed. 

-- 
"When you have to choose between a first-rate company with a 
second-rate product and a second-rate company with a first-rate 
product, it's never an ideal choice. " -Ed (www.overclockers.com)