[262] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: UK Encryption Policy

daemon@ATHENA.MIT.EDU (Peter Trei)
Fri Feb 21 05:16:48 1997

From: "Peter Trei" <trei@process.com>
To: cryptography@c2.net
Date: Thu, 20 Feb 1997 15:55:57 -6
Reply-to: trei@process.com
CC: trei@c2.net

"Mike Cobb" <mikec@cobweb.co.uk> writes:

> Over two months ago I posted a message to this list regarding UK export
> policy for encryption software. Since then I've had a frustrating but
> eventually rewarding dialog with the Department of Trade and Industry
> regarding exporting my file encryption and password tracker program which
> uses up to a 248bit key.
> 
> Apparently my request was the first of its kind which is one reason why I
> have only just had a final reply back from the DTI.
> 
> In a nutshell there are no laws currently, UK or EC that cover the export
> of intangible technology. As long as I only make this program available
> over the Internet, it is not illegal and it does not require an export
> license.

If I read this correctly, the situation now is that in the UK, a
person could legally put up a piece of crypto software on an
anonymous FTP site, but it would be illegal to print out the 
software and send it internationally via the post. 

In the US, I can (I think) print out source code and mail it
internationally without worry, but if I put it on an unrestricted
ftp server, they'll try to put me in jail.

Kafka, Orwell, where are we when we need you?
 
> 10. And if concerns are sufficient for a licene to be refused, what
> reputable exporter would wish to export it by any means?

Does disagreeing with the UK government now make you disreputable?

> Regards
> Mike Cobb

Peter Trei
trei@process.com

home help back first fref pref prev next nref lref last post