In article <3105FBFC.4DC9@netscape.com> Jeff Weinstein <jsw@netscape.com> writes: > The other way would be to export a binary with pluggable crypto, > which is generally agreed to be regulated by the ITAR in the same > way as software that actually contains crypto. How did kerberos avoid this? The "bones" distribution of kerberos without crypto was not regulated by ITAR, right? David