After reviewing [1], I think we need to record and report our use of cryptographic libraries that fall under US export control.
This means: 1) Updating the eccnmatrix.xml [2] in svn and publishing the change [3]. 2) Sending an email [4]. 3) Updating README.md [5]. Mark, #1 and #2 need to be done by the PMC Chair. Can you review this and let me know what you think? I can tackle #3 after. Thanks, Anthony [1] http://www.apache.org/dev/crypto.html [2] https://gist.github.com/metatype/96da9d928f20d5ae638cc16dd4ee9a85 [3] https://cms.apache.org/www/publish [4] https://gist.github.com/metatype/24b4462af6319cbf568b63ad3a56464e [5] https://gist.githubusercontent.com/metatype/b50b49a4c2a7a99793029b3ea0cde8c3/raw/40aca011a65c12d6fbec73fce60f57f43323d36f/README.md