You are viewing a plain text version of this content. The canonical link for it is here.
Posted to general@xml.apache.org by Berin Lautenbach <be...@ozemail.com.au> on 2003/06/14 12:05:52 UTC
XML Encryption Support
Peoples,
In the security sub-project, we have implemented Java and (to a lesser
extent) C++ support for the XML Digital Signature standards. The next
mountain to climb is XML Encryption (and the Java guys have already
started this).
We are not too sure what the legal implications for Apache might be if
we start making code that uses encryption. The general
feeling within the sub-project is that it should not be an issue,
because we are not actually implementing any encryption algorithms
directly. (OpenSSL is used for C++ and any JCE compliant crypto library
is used for Java.)
I know back in the bad old days, even applications that had hooks for
crypto could get in trouble, but my understanding these days is that
with the relaxation of the various export controls this is now OK.
However I'm not a lawyer by any means.
Any thoughts and/or suggestions on a way forward welcome.
Cheers,
Berin
---------------------------------------------------------------------
In case of troubles, e-mail: webmaster@xml.apache.org
To unsubscribe, e-mail: general-unsubscribe@xml.apache.org
For additional commands, e-mail: general-help@xml.apache.org
Re: XML Encryption Support
Posted by robert burrell donkin <ro...@blueyonder.co.uk>.
if my poor attempt at humour has offended anyone, then my apologies.
- robert
On Sunday, June 15, 2003, at 02:51 AM, Peter B. West wrote:
> Robert,
>
> If true, they are a great asset to the ASF, and we should probably treat
> them with respect for their important role in the Open Source arena. They
> might be offended to read such a description.
>
> Peter
>
> robert burrell donkin wrote:
>> IIRC the ASF has tamed lawyers trained to perform tricks like this.
>
> -- Peter B. West http://www.powerup.com.au/~pbwest/resume.html
>
>
> ---------------------------------------------------------------------
> In case of troubles, e-mail: webmaster@xml.apache.org
> To unsubscribe, e-mail: general-unsubscribe@xml.apache.org
> For additional commands, e-mail: general-help@xml.apache.org
>
---------------------------------------------------------------------
In case of troubles, e-mail: webmaster@xml.apache.org
To unsubscribe, e-mail: general-unsubscribe@xml.apache.org
For additional commands, e-mail: general-help@xml.apache.org
Re: XML Encryption Support
Posted by "Peter B. West" <pb...@powerup.com.au>.
Robert,
If true, they are a great asset to the ASF, and we should probably treat
them with respect for their important role in the Open Source arena.
They might be offended to read such a description.
Peter
robert burrell donkin wrote:
> IIRC the ASF has tamed lawyers trained to perform tricks like this.
--
Peter B. West http://www.powerup.com.au/~pbwest/resume.html
---------------------------------------------------------------------
In case of troubles, e-mail: webmaster@xml.apache.org
To unsubscribe, e-mail: general-unsubscribe@xml.apache.org
For additional commands, e-mail: general-help@xml.apache.org
Re: XML Encryption Support
Posted by robert burrell donkin <ro...@blueyonder.co.uk>.
On Saturday, June 14, 2003, at 11:10 PM, Berin Lautenbach wrote:
> robert burrell donkin wrote:
>> IIRC the ASF has tamed lawyers trained to perform tricks like this.
>
> <GRIN>. Had a feeling that was the case. I believe there is a legal@,
> but I'm not sure of the correct protocol for asking them questions.
> (Direct to the list vs. via the board?)
i'm not sure about the correct etiquette either :)
maybe this is a question that could be answered by a post to the xml pmc
or community@apache.
- robert
---------------------------------------------------------------------
In case of troubles, e-mail: webmaster@xml.apache.org
To unsubscribe, e-mail: general-unsubscribe@xml.apache.org
For additional commands, e-mail: general-help@xml.apache.org
Re: XML Encryption Support
Posted by Berin Lautenbach <be...@ozemail.com.au>.
robert burrell donkin wrote:
> IIRC the ASF has tamed lawyers trained to perform tricks like this.
<GRIN>. Had a feeling that was the case. I believe there is a legal@,
but I'm not sure of the correct protocol for asking them questions.
(Direct to the list vs. via the board?)
Cheers,
Berin
---------------------------------------------------------------------
In case of troubles, e-mail: webmaster@xml.apache.org
To unsubscribe, e-mail: general-unsubscribe@xml.apache.org
For additional commands, e-mail: general-help@xml.apache.org
Re: XML Encryption Support
Posted by robert burrell donkin <ro...@blueyonder.co.uk>.
IIRC the ASF has tamed lawyers trained to perform tricks like this.
- robert
On Saturday, June 14, 2003, at 11:05 AM, Berin Lautenbach wrote:
> Peoples,
>
> In the security sub-project, we have implemented Java and (to a lesser
> extent) C++ support for the XML Digital Signature standards. The next
> mountain to climb is XML Encryption (and the Java guys have already
> started this).
>
> We are not too sure what the legal implications for Apache might be if
> we start making code that uses encryption. The general
> feeling within the sub-project is that it should not be an issue,
> because we are not actually implementing any encryption algorithms
> directly. (OpenSSL is used for C++ and any JCE compliant crypto library
> is used for Java.)
>
> I know back in the bad old days, even applications that had hooks for
> crypto could get in trouble, but my understanding these days is that with
> the relaxation of the various export controls this is now OK. However I'm
> not a lawyer by any means.
>
> Any thoughts and/or suggestions on a way forward welcome.
>
> Cheers,
> Berin
>
>
>
> ---------------------------------------------------------------------
> In case of troubles, e-mail: webmaster@xml.apache.org
> To unsubscribe, e-mail: general-unsubscribe@xml.apache.org
> For additional commands, e-mail: general-help@xml.apache.org
>
---------------------------------------------------------------------
In case of troubles, e-mail: webmaster@xml.apache.org
To unsubscribe, e-mail: general-unsubscribe@xml.apache.org
For additional commands, e-mail: general-help@xml.apache.org