You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@shindig.apache.org by sg...@apache.org on 2008/03/21 09:41:49 UTC
svn commit: r639567 - /incubator/shindig/trunk/NOTICE
Author: sgala
Date: Fri Mar 21 01:41:44 2008
New Revision: 639567
URL: http://svn.apache.org/viewvc?rev=639567&view=rev
Log:
Add the notice about cryptographic material to NOTICE
SHINDIG has code to crypt arbitrary blobs, using the
javax.crypto infrastructure, and the use of it must
be reported and noticed.
Modified:
incubator/shindig/trunk/NOTICE
Modified: incubator/shindig/trunk/NOTICE
URL: http://svn.apache.org/viewvc/incubator/shindig/trunk/NOTICE?rev=639567&r1=639566&r2=639567&view=diff
==============================================================================
--- incubator/shindig/trunk/NOTICE (original)
+++ incubator/shindig/trunk/NOTICE Fri Mar 21 01:41:44 2008
@@ -33,3 +33,33 @@
OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+-----------------------------------------------------------
+This distribution includes cryptographic software. The country in
+which you currently reside may have restrictions on the import,
+possession, use, and/or re-export to another country, of
+encryption software. BEFORE using any encryption software, please
+check your country's laws, regulations and policies concerning the
+import, possession, or use, and re-export of encryption software, to
+see if this is permitted. See <http://www.wassenaar.org/> for more
+information.
+
+The U.S. Government Department of Commerce, Bureau of Industry and
+Security (BIS), has classified this software as Export Commodity
+Control Number (ECCN) 5D002.C.1, which includes information security
+software using or performing cryptographic functions with asymmetric
+algorithms. The form and manner of this Apache Software Foundation
+distribution makes it eligible for export under the License Exception
+ENC Technology Software Unrestricted (TSU) exception (see the BIS
+Export Administration Regulations, Section 740.13) for both object
+code and source code.
+
+The following provides more details on the included cryptographic
+software:
+
+ Apache Shindig interfaces with the Java JCE APIs to provide digital
+ signing and encryption of messages using the AES, SHA1, and
+ HMAC-SHA1 standards.
+
+ Apache Shindig interfaces with the OAuth library
+ <http://http://code.google.com/p/oauth/> to provide digital signing
+ of messages according to the OAuth standard.