Mailing List Archive

Crypto export from the UK
The simple answer seems to be a) noone's entirely sure and b) noone's ever
been hassled over it, AFAIK. There are a specific list of countries that
it is definitely illegal to export it to (places like Libya, Iraq, etc),
but it's somewhat debatable as to whether you can legally export to
anywhere else. Whatever the case, there's a big ftp site at ftp.ox.ac.uk
which has been there for years with no problems, so your friend could
upload it to there and let them take any flak from the government.

I suspect the true answer is that it's probably illegal (at least to
export to non-NATO countries), but the government have much more important
things to worry about.. I suspect if they did take someone to court over
crypto export, they'd just be laughed at and the case would be kicked out.

Mark


--
sameer Voice: 510-601-9777
Community ConneXion FAX: 510-601-9734
The Internet Privacy Provider Dialin: 510-658-6376
http://www.c2.org (or login as "guest") sameer@c2.org
Re: crypto export from the UK [ In reply to ]
Jon Baber <jbaber@mi.leeds.ac.uk> writes:
> sameer <sameer@c2.org> wrote:
> > Could people in the UK please tell me what the crypto export
> > laws are like there? I know someone who wrote some really great crypto
> > code in the UK but isn't willing to distribute it because of crypto
> > export laws... I was under the impression that it was legal to export
> > crypto from the UK.
>
> I believe that the laws regarding the export of crypto from the UK are
> very similar to the ITAR regs in the US.

I thought they were markedly different!

I always understood there were NO restrictions on crypto export,
import or use to western countries. There used to be COCOM agreements
which said that you should get approval to send commercially produced
crypto to some blacklisted countries (Iraq, etc). I also read that
the COCOM restrictions did not claim to apply to free software.

Anyway, I read that the COCOM agreement has expired, so none of this
applies anymore, even.

There are a number of surveys around, and the above is my
understanding from reading those.

If you have any thing else I should be reading I'd like to see it.

> However our Government seems to take the view that putting crypto
> software on the net is not exporting it, the exporting is done
> whenever anyone from an export restricted country downloads the
> software and is done by them rather than by the person who made the
> software available.

I also have heard this.

> Strong crypto is therefore openly available from a number of places in
> this country, particually sable.ox.ac.uk at the university of Oxford.

Indeed.

> Of course IANAL and the government may change it's mind about the
> interpretation of these things but I would expect that your
> acquaintance would be perfectly safe distributing his software via
> sable (the ftp site (and its predicessor) have been distributing
> crypto software for a number of years and I have not heard of any
> problems).

I think he would be safe emailing it, putting it on the WWW, or
posting it to USENET. There are no selective access restrictions on
*any* crypto ftp/http sites that I know of in the UK (like various
ones in the US which make a sho of enforcing the export restriction by
not allowing export to non-US domain names.)

Adam


--
sameer Voice: 510-601-9777
Community ConneXion FAX: 510-601-9734
The Internet Privacy Provider Dialin: 510-658-6376
http://www.c2.org (or login as "guest") sameer@c2.org
Re: crypto export from the UK [ In reply to ]
Jon Baber <jbaber@mi.leeds.ac.uk> writes:
> sameer <sameer@c2.org> wrote:
> > Could people in the UK please tell me what the crypto export
> > laws are like there? I know someone who wrote some really great crypto
> > code in the UK but isn't willing to distribute it because of crypto
> > export laws... I was under the impression that it was legal to export
> > crypto from the UK.
>
> I believe that the laws regarding the export of crypto from the UK are
> very similar to the ITAR regs in the US.

I thought they were markedly different!

I always understood there were NO restrictions on crypto export,
import or use to western countries. There used to be COCOM agreements
which said that you should get approval to send commercially produced
crypto to some blacklisted countries (Iraq, etc). I also read that
the COCOM restrictions did not claim to apply to free software.

Anyway, I read that the COCOM agreement has expired, so none of this
applies anymore, even.

There are a number of surveys around, and the above is my
understanding from reading those.

If you have any thing else I should be reading I'd like to see it.

> However our Government seems to take the view that putting crypto
> software on the net is not exporting it, the exporting is done
> whenever anyone from an export restricted country downloads the
> software and is done by them rather than by the person who made the
> software available.

I also have heard this.

> Strong crypto is therefore openly available from a number of places in
> this country, particually sable.ox.ac.uk at the university of Oxford.

Indeed.

> Of course IANAL and the government may change it's mind about the
> interpretation of these things but I would expect that your
> acquaintance would be perfectly safe distributing his software via
> sable (the ftp site (and its predicessor) have been distributing
> crypto software for a number of years and I have not heard of any
> problems).

I think he would be safe emailing it, putting it on the WWW, or
posting it to USENET. There are no selective access restrictions on
*any* crypto ftp/http sites that I know of in the UK (like various
ones in the US which make a sho of enforcing the export restriction by
not allowing export to non-US domain names.)

Adam


--
sameer Voice: 510-601-9777
Community ConneXion FAX: 510-601-9734
The Internet Privacy Provider Dialin: 510-658-6376
http://www.c2.org (or login as "guest") sameer@c2.org