Re: Paper is out, electrons are in

[Jeff Williams <jwkckid1@ix.netcom.com>]

Kent,

  I believe you are mistaken Kent.  Please review my latest posting.
Here I will incapsulize for you.

We can summarize the legal status of PGP as follows: 

     International PGP (version 2.6.2i), you should have no problems 
     talking to other versions. 2.6.2i is endorsed by Phil Zimmermann
     for use outside the USA, and is faster and more compatible than 
     any other freeware version of PGP.
 
     It may be illegal to send encrypted messages in some countries or
     on some networks. 
     You should not export PGP from the USA or Canada to any other
country.

     Issue 1: Export Law 

It is probable (not certain, but probable) that PGP falls under the 
ITAR restrictions, which control the export of munitions and 
cryptographic technology from the US and Canada. 

If this is the case, it is illegal to export PGP from the USA or 
Canada to any other country. 

Of course, if you don't get PGP from the US or Canada, the issue is
moot. 

Issue 2: Crypto Legality 

In some countries, the use of cryptography is restricted by law. 
For example, in the UK it is illegal to transmit encrypted data 
by radio communication. This is generally the case in other countries, 
where Amateur Radio frequencies are concerned. 

In some countries, it is outright illegal to encrypt data at all. 
In other countries, they're working on it.

Some providers of networking services restrict what sort of traffic 
is allowed on their networks. Make sure your service provider allows 
the passage of encrypted data.

====================================================================================
Fot these reasons It is obvious to me that use of PGP would not
be a good choice, and may creat problems legaly, which I believe we
would all like to avoid.  

  Kent, You seem to believe that I would like to see such restrictions 
or laws.  Nothing could be further from the truth.  In fact I am 
for a more open access to ANY data in ANY form ANYWHERE in the world.
But this is just not the case currently.  This causes some compatability
problems, France is a good example.  The EU has not decided on its
network seccurity policy to date, hence there would be some problems
here.  Givin that as the ACTUAL case, there needs to be a policy
that IAHC or CORE needs to determine in this reguard, and it needs
to be clearly stated in the Final Draft.  

Kent Crispin wrote:
> 
> Jeff Williams allegedly said:
> >
> >   Percisely my point kent.  PGP can be used for Encryption if using the
> > RSA CSP algorythems.  I think you are only interpreting it one way.
> > I will admit it is ambiquous somewhat.
> > >
> > > But that's a moot point, since international versions of PGP already
> > > exist.
> >
> >   Yes, this is true.  ANd are not considered legal for commercial
> > transactions
> > form outside of the US and Canada.
> >
> >   I can have amember or our legal department give you a call to clarify
> > in more detail if that will help.
> 
> That would be a waste of time for all concerned.
> 
> Unfortunately, Jeff, you don't know what you are talking about.  There
> is no law that prevents me from encrypting a document using any method
> I chose and sending it to someone outside the country.  There are
> those who would like such laws, but they don't exist yet.

Regards,

-- 
Jeffrey A. Williams
DIR. Internet Network Eng/SR. Java Development Eng.
Information Eng. Group. 
Phone :972-447-1878
E-Mail jwkckid1@ix.netcom.com