[262] in cryptography@c2.net mail archive
Re: UK Encryption Policy
daemon@ATHENA.MIT.EDU (Peter Trei)
Fri Feb 21 05:16:48 1997
From: "Peter Trei" <trei@process.com>
To: cryptography@c2.net
Date: Thu, 20 Feb 1997 15:55:57 -6
Reply-to: trei@process.com
CC: trei@c2.net
"Mike Cobb" <mikec@cobweb.co.uk> writes:
> Over two months ago I posted a message to this list regarding UK export
> policy for encryption software. Since then I've had a frustrating but
> eventually rewarding dialog with the Department of Trade and Industry
> regarding exporting my file encryption and password tracker program which
> uses up to a 248bit key.
>
> Apparently my request was the first of its kind which is one reason why I
> have only just had a final reply back from the DTI.
>
> In a nutshell there are no laws currently, UK or EC that cover the export
> of intangible technology. As long as I only make this program available
> over the Internet, it is not illegal and it does not require an export
> license.
If I read this correctly, the situation now is that in the UK, a
person could legally put up a piece of crypto software on an
anonymous FTP site, but it would be illegal to print out the
software and send it internationally via the post.
In the US, I can (I think) print out source code and mail it
internationally without worry, but if I put it on an unrestricted
ftp server, they'll try to put me in jail.
Kafka, Orwell, where are we when we need you?
> 10. And if concerns are sufficient for a licene to be refused, what
> reputable exporter would wish to export it by any means?
Does disagreeing with the UK government now make you disreputable?
> Regards
> Mike Cobb
Peter Trei
trei@process.com