Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!sdd.hp.com!decwrl!shelby!lyre.enet.dec.com!spm From: spm@lyre.enet.dec.com (Steven Miller) Newsgroups: comp.protocols.kerberos Subject: Re: So much for kerberos in Ultrix 4.0 (outside the USA) Message-ID: <9010051338.AA18337@decpa.pa.dec.com> Date: 5 Oct 90 13:38:22 GMT Sender: news@shelby.stanford.edu (USENET News System) Organization: Internet-USENET Gateway at Stanford University Lines: 9 I don't know what claims DEC made about what it was exporting outside the US, but keep in mind that under US law DEC had to get approval from NSA to export anything using crypto outside of the US. Basically, the NSA won't allow you to export anything that can be used for general purpose encryption, but they now will allow embedded cryptography used for authentication purposes only. Otherwise, individual licenses are required from the US Dept of Commerce, with NSA acting as consultant. Steve