On Sat, 28 Apr 2001, Stephen Illingworth wrote:
> On 27-Apr-01, you wrote:
>
> > Can someone advise me on if Holger has sent them U.S. SSL files
> > recently or if it is okay to continue to use the international
> > versions.
>
> It's legal to use the International version. The only thing you
Yes and no. It's no longer illegal to use the International RSA
implementation in the US, since the patent expired last September.
> can't legally do is use the rc4/arcfour and idea cipher. Both are
> patented in the US and require special licences.
Actually, RC4 is not patented, but it's considered a "trade secret". It's
also trademarked, which is why "arcfour" isn't called "RC4".
Unfortunately there's no way to disable ARCFOUR in the "International"
SSL. This remains the only US vs. International legal issue.
IDEA isn't that important for SSL use, and since it's *also* patented in
Europe, it's not enabled by default. This part is the same for US and
International versions. If you *do* want to legally use IDEA, you can buy
a license for $15.
Fred Wright
--
To unsubscribe send "unsubscribe miami-talk-ml" to
"[EMAIL PROTECTED]". For help on list commands send "help" to
"[EMAIL PROTECTED]".
