On 11.02.2013 20:41, Antoine Pitrou wrote: > M.-A. Lemburg <mal <at> egenix.com> writes: >> >> Let's please not get paranoid over all this. As long as the parameters >> remain configurable, we can approach these things in small steps and >> don't need to get all tied up in discussions about how to turn >> PyPI into Fort Knox > > Fort Knox is in the US, which would create issues with crypto export laws, > no?
Oh, PyPI is as well... and it comes with built-in export via the mirror framework ;-) Here's some background information, if you want to host crypto code on PyPI: http://www.bis.doc.gov/encryption/encfaqs6_17_02.html#2 http://www.ecfr.gov/cgi-bin/retrieveECFR?gp=&SID=306f1d2ac33ae74f6d060e14258309ba&r=PART&n=15y2.1.3.4.22#15:2.1.3.4.22.0.1.3 http://www.ecfr.gov/cgi-bin/text-idx?c=ecfr&rgn=div5&view=text&node=15:2.1.3.4.25&idno=15#15:2.1.3.4.25.0.1.13 For a more comprehensible writeup, see how the Apache foundation handles these things: http://www.apache.org/dev/crypto.html Finally, to make things more complicated, this whole EAR thing is constantly changing, see e.g. http://cryptome.org/0003/bis010711.htm http://www.bis.doc.gov/encryption/default.htm http://www.bis.doc.gov/encryption/question2.htm At the moment, it's probably best to send an email to the BIS if you make the software available at some URL for the first time. That satisfies the TSU reporting requirements. -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Source (#1, Feb 11 2013) >>> Python Projects, Consulting and Support ... http://www.egenix.com/ >>> mxODBC.Zope/Plone.Database.Adapter ... http://zope.egenix.com/ >>> mxODBC, mxDateTime, mxTextTools ... http://python.egenix.com/ ________________________________________________________________________ ::::: Try our mxODBC.Connect Python Database Interface for free ! :::::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 http://www.egenix.com/company/contact/ _______________________________________________ Catalog-SIG mailing list [email protected] http://mail.python.org/mailman/listinfo/catalog-sig
