Re: Crippled Notes export encryption

[Jeff Weinstein <jsw@netscape.com>]

Perry E. Metzger wrote:
> 
> Herb Sutter writes:
> > >So, Lotus thinks they can fool people by back-dooring in key escrow, eh?
> > >
> > >Time to break out the artillery.
> >
> > Careful... what would YOU have done, with your customers demanding stronger
> > crypto today and you unable to legally give it to them?
> 
> Set up development shop overseas for the crypto plug-ins.
> 
> The solution is obvious and easy.
> 
> By the way, I really think Netscape should simply ship Jeff and other
> people to the Amsterdam office or wherever else seems reasonable and
> do all the crypto work from there. It will save trouble and
> hassle. U.S. citizens wanting full 128 bit over the net would then get
> it from Netscape's overseas download sites. No one anywhere in the
> world would be forced to use crap.

  I can see two practical ways to build a netscape product outside
the US.  The first is to export the source code for the Navigator
with the crypto code removed.  All of the calls to crypto would
have to be removed as well.  I've heard some people claim that the
government could come after us on the grounds that we were taking
part in a conspiracy to export strong crypto.

  The other way would be to export a binary with pluggable crypto,
which is generally agreed to be regulated by the ITAR in the same
way as software that actually contains crypto.

  I suspect that to get around the US government in this way we
would have to develop the entire product outside of the US.  That
would be a very drastic move that is not likely to happen any
time soon.  We are going to invest some money and effort into
trying to get the current restrictions lifted first.

  Of course there are some of us who are ready and willing to go
if it comes to that...

	--Jeff

-- 
Jeff Weinstein - Electronic Munitions Specialist
Netscape Communication Corporation
jsw@netscape.com - http://home.netscape.com/people/jsw
Any opinions expressed above are mine.