Path: utzoo!utgpu!news-server.csri.toronto.edu!rutgers!usc!sdd.hp.com!zaphod.mps.ohio-state.edu!rpi!uupsi!sunic!nuug!ifi!fiol!edmbv From: edmbv@fiol.UiB.NO (Bjorn Asle Valde) Newsgroups: comp.protocols.kerberos Subject: Re: Export restriction removed (?) Keywords: free DES, Kerberos export Message-ID: <3328@ifi.uio.no> Date: 12 Jul 90 10:02:28 GMT References: <43108@cornell.UUCP> <2495@sequent.cs.qmw.ac.uk> <2912@media-lab.MEDIA.MIT.EDU> Sender: news@ifi.uio.no Followup-To: comp.protocols.kerberos Distribution: comp Organization: University of Bergen, Norway. Lines: 52 In article <2912@media-lab.MEDIA.MIT.EDU> henry@mit.edu (Henry Mensch) writes: >In article <2495@sequent.cs.qmw.ac.uk>, liam@cs.qmw.ac.uk (William >Roberts) writes: >|> Has there been any changes in the distribution restrictions on >|> Kerberos? Ken Birman's message on comp.sys.isis suggests that >|> things are changing and the computing press has much talk about >|> COCOM rules going away... > >the DES export restriction doesn't seem to have any thing to do with COCOM >restrictions (we don't export DES to our 'friends' either ... not even >canadians!) > >i do know that digital equipment corporation is shipping kerberos with its >ULTRIX 4.0 software, and they are exporting a fully-operation kerberos to >sites outside the US. True. >i'm inclined to discount comments of the sort you included in your article >because those remarks amount to is "a friend of a friend of a friend who >claims to be an expert says it's doable, but none of us know how." > >it is also important for us to remember that MIT and Project Athena's primary >business is not the export of software, so we don't have the fleet of >expensive >lawyers to pursue these issues. Reasonable. >you can be sure that when we have word that kerberos can be freely exported, >we will let you in on the news. As I'm sure you are aware of are there DES implementations done outside the US (I've played with the Finnish one, works nicely) and therefore free of any export restrictions. [ Well, I'm no layer, but that's what the documentation to the finnish DES seems to indicate]. If MIT used that DES would they be free to ship Kerberos outside the US? If I took `Bones' and melted in a "free" DES would I be able to export it - let's say to the US :-) ? Surely MIT should concentrate on Kerberos, not legal issues. But software DES really isn't a hot potato any more, and it's a bore to reinvent the wheel, e.g. starting with 'Bones'. ># Henry Mensch / / E40-379 MIT, Cambridge, MA ># / / Regards, Bjorn Asle -- Bjorn Asle Valde bav@fiol.uib.no +47 5 544214 Edb-Senteret, University of Bergen, EDMBV@NOBERGEN.EARN Fax: 544299 Thorm.gt.55, N-5008 Bergen, Norway. S=valde;OU=cc;O=uib;P=uninett;C=no