Re: [pyOpenSSL] Windows Installers

[M.-A. L. <ma...@eg...>]

Zooko Wilcox-O'Hearn wrote:
> On Tuesday,2009-08-04, at 3:49 , M.-A. Lemburg wrote:
> 
>> Note that uploading pyOpenSSL eggs to PyPI could result in legal
>> problems for the PSF due to export restrictions. I'm not sure that's
>> such a good idea. In any case, you'd have to let the PSF know in advance.
> 
> A quick glance at the results of a search for "crypt" suggest that pypi
> already hosts dozens of crypto packages.  I think that the crypto export
> regulations from the USA are now routinely ignored by more or less
> everyone on the Internet, which is how it should be.
> 
> Also, they changed the regulations last year and I still haven't gotten
> around to reading about the new rules, so for all I know what PSF is
> currently doing is legal.  Or maybe it is even more illegal than it was
> before.  Who cares?

Whether export regulations are good or bad is not the question
and we're not the ones making the laws. However, the PSF runs
PyPI and as legal entity it has to follow the rules whatever
they are.

PyPI itself is hosted in the Netherlands, so the EU regulations
apply for things being downloaded from PyPI:

  http://www.ez.nl/english/Subjects/Exportcontrols

These are based on the Wassenaar Arrangement:

  http://www.wassenaar.org/

There's a GENERAL SOFTWARE NOTE in the the EU regulations that
applies to all software "in the public domain", but this term
is not very well defined. The GSN basically removes such software
from being controlled

  http://ec.europa.eu/trade/issues/sectoral/industry/dualuse/index_en.htm

I don't know whether the Netherlands have any extra requirements.

The current regulations for the US require filing a notification
of all exported and re-exported OSS crypto software (including
any crypto software being uploaded to PyPI from the US):

  http://www.bis.doc.gov/encryption/pubavailencsourcecodenofify.html

-- 
Marc-Andre Lemburg
eGenix.com

Professional Python Services directly from the Source  (#1, Aug 04 2009)
>>> Python/Zope Consulting and Support ...        http://www.egenix.com/
>>> mxODBC.Zope.Database.Adapter ...             http://zope.egenix.com/
>>> mxODBC, mxDateTime, mxTextTools ...        http://python.egenix.com/
________________________________________________________________________

::: Try our new mxODBC.Connect Python Database Interface for free ! ::::


   eGenix.com Software, Skills and Services GmbH  Pastor-Loeh-Str.48
    D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg
           Registered at Amtsgericht Duesseldorf: HRB 46611
               http://www.egenix.com/company/contact/