Date: Thu, 27 Jan 2000 13:10:30 -0800
From: "H. Peter Anvin" <hpa@transmeta.com>
To: users@kernel.org, mirrors@kernel.org, lkams-contacts@kernel.org
Subject: kernel.org cryptographic policy change scheduled for 2000-02-14 22:00 

Dear friends,

After extensive consultations with our legal counsel, we believe that we
have found a reasonable method of supporting cryptography on
kernel.org.  Consequently, the following change in kernel.org policy
will take effect Monday Feb 14, 2000 at 22:00 UTC (14:00 PST, 17:00 EST,
23:00 MET) *UNLESS OTHERWISE IS INDICATED BEFORE THEN* (in case the
situation changes.)

a) Cryptographic Open Source software will be permitted on kernel.org. 
For binaries, *the source must be available on kernel.org*.  This will
need to be strictly enforced, so contributors, please stick to this
rule.

b) We can no longer support official mirrors in the following countries,
or allow other official mirrors to be listed as supporting them:
Afghanistan, Cuba, Iran, Iraq, Libya, North Korea, Sudan, Syria or
Yugoslavia.  (The situation with Yugoslavia is a bit tricky, since the
regs only apply to Serbia, specifically.  If we end up having someone
wanting to set up a Montenegrine mirror, we'll deal with it then.)

c) The following legal notice will apply to all users of kernel.org:

     "Some of the software on this site is capable of encryption and
     therefore is regulated as encryption software by the United States
     Government under the U.S. Export Administration Regulations ("EAR").
     Anyone requesting or receiving such software agrees to comply with the
     EAR, and also acknowledges (1) that the software cannot be exported
     without a license or other authorization from the United States
     Government and (2) that the software is not intended for use by any
     foreign (non-U.S.) government."

Obviously, this is all pretty silly, but that's really the best we can
do.  This is government stupidity we're dealing with.  I would like to
especially apologize to our one Yugoslavian mirror for having to cut you
off.  I really tried to find a way around it.


If you have any issues with this policy change, please contact me
privately.

Sincerely,

	H. Peter Anvin


-- 
<hpa@transmeta.com> at work, <hpa@zytor.com> in private!
"Unix gives you enough rope to shoot yourself in the foot."