[2735] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: FYI: I believe Microsoft has knowingly violated the export

daemon@ATHENA.MIT.EDU (Arnold G. Reinhold)
Thu May 21 11:51:50 1998

In-Reply-To: <199805201710.KAA11981@galt>
Date: Thu, 21 May 1998 07:54:20 -0400
To: cryptography@c2.net
From: "Arnold G. Reinhold" <reinhold@world.std.com>
Cc: Marc Horowitz <marc@cygnus.com>, rsalz@shore.net,
        Tom Perrine <tep@SDSC.EDU>

At 10:10 AM -0700 5/20/98, Tom Perrine wrote:
>I think that part of the issue is that Kerberos was deemed to be
>non-exportable if the calls to the crypto libraries were left in, but
>the called crypto libraries were left out.
>

I hope the discussion of who misunderstood whom does not obscure an very
important point Tom's post raises. Widespread adoption of Kerberos, which
is only an authentication technology and which could have alleviated many
of the Internet's security problems, was thwarted by US Government export
regulations. Kerberos should be the poster child for the damage export
controls have caused to US security interests.

Arnold Reinhold


Got Crypto? http://ciphersaber.gurus.com



home help back first fref pref prev next nref lref last post