Full Disclosure mailing list archives

Re: Questions regarding cryptography laws


From: Walter van Holst <walter.van.holst () xs4all nl>
Date: Wed, 07 Sep 2011 15:28:31 +0200

On Wed, 07 Sep 2011 08:44:14 -0400, Sihan wrote:
Hello list!

 This is my first time posting software on sourceforge, and I see
this:
 "This project DOES incorporate, access, call upon or otherwise use
encryption. Posting of open source encryption is controlled under 
U.S.
Export Control Classification Number "ECCN" 5D002 and must be
simultaneously reported by email to the U.S. government. You are
responsible for submitting this email report to the U.S. government 
in
accordance with procedures described
in:http://www.bis.doc.gov/encryption/PubAvailEncSourceCodeNotify.html
[1]and Section 740.13(e) of the Export Administration Regulations
("EAR") 15 C.F.R. Parts 730-772."

 I am in Canada, so i assume this does not apply to me. But are there
any paperwork I should do in Canada?

Your assumption is wrong. Sourceforge is in the USA, and has per their 
usage conditions made you responsible for their paperwork in the USA. 
Moreover, Canada is like most western countries a signatory to the 
Wassenaar Agreement on export controls, so this rule effectively applies 
to you as well.

Regards,

  Walter

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: