[Datenschleuder] [58]    Wirtschaftsspionage und Kryptoverbot... Continued

Wirtschaftsspionage und Kryptoverbot... Continued Date: Tue, 31 Dec 1996 19:05:05 -0800 From: Lucky Green Subject: New US regs ban downloadable data-security software The new US crypto export regulations control the export of most if not all data-security software. Regardless if the software uses cryptography or not. Many software archives seem to be in violation of the new regs. [Federal Register: December 30, 1996 (Volume 61, Number 251)] [makes it illegal to export without a license:] c.3. ``Software'' designed or modified to protect against malicious computer damage, e.g., viruses; [For the full text, see http://www.epic.org/crypto/export_controls/interim_regs_12_96.html] This certainly controls virus checkers, firewalls, and other security software. There are substantial penalties involved in violating the EAR. The US can assess daily penalties and block all exports of a company's non-violating products. Criminal penalties apply as well. "Export", as defined in the new regs, includes making software available on the web or via ftp. If you have a virus checker or similar software available for ftp inside the US and the software can be downloaded from outside the US, you are most likely in violation of the new EAR which took effect on 12/30/1996. If you do not wish to go to prison, you may want to consult an attorney immediately and remove all data security software from your server. IANAL --Lucky Green

[Datenschleuder] [58]    Wirtschaftsspionage und Kryptoverbot... Continued