Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!husc6!encore!cloud9!cme
From: cme@cloud9.Stratus.COM (Carl Ellison)
Newsgroups: comp.protocols.kerberos
Subject: Re: Change in Export Rules
Message-ID: <5835@cloud9.Stratus.COM>
Date: 23 Jun 89 21:23:42 GMT
References: <8906230453.AA21081@PTT.LCS.MIT.EDU>
Organization: Stratus Computer, Inc., Marlboro, MA
Lines: 21

In article <8906230453.AA21081@PTT.LCS.MIT.EDU>, Saltzer@ALLSPICE.LCS.MIT.EDU (Jerry Saltzer) writes: [here paraphrased]
1.  "ancillary encryption control devices" are controlled
2.  leaving out the DES package isn't enough
3.  leaving out the calls to the DES package is enough

> [...] those sources would be exportable without the special
> State Department license.  (The line of reasoning here seems to be
> that one must be very knowledgeable to put the calls back in in all
> the right places.)


How knowledgeable?

What if the calls were commented out?

If that's not good enough, what if the call lines are deleted, leaving
a blank line?


--Carl Ellison                      UUCP::  cme@cloud9.Stratus.COM
SNail:: Stratus Computer; 55 Fairbanks Blvd.; Marlborough MA 01752
Disclaimer::  (of course)