Re: [pyOpenSSL] Windows Installers

[M.-A. L. <ma...@eg...>]

Zooko Wilcox-O'Hearn wrote:
> On Tuesday,2009-08-04, at 12:04 , M.-A. Lemburg wrote:
> 
>> Whether export regulations are good or bad is not the question and
>> we're not the ones making the laws.
> 
> I'm a bit confused -- I never said anything about making laws.  I said
> that no open source programmer, as far as I can tell, is spending the
> time and effort to obey the laws, and that I approved.  My advice to JP
> Calderone is to upload crypto to the Net without first notifying the US
> Bureau of Export Controls, and then see if he gets arrested.  That's
> what I've been doing -- http://pypi.python.org/pypi/pycryptopp -- and I
> haven't gotten arrested yet.

You're missing the point: The PSF can get into trouble for making
crypto code available via their website without complying to existing
laws and regulations.

>> However, the PSF runs PyPI and as legal entity it has to follow the
>> rules whatever they are.
> 
> How does this impact JP Calderone's decision to upload or not upload
> pyOpenSSL?  If the PSF wants to make sure that all of the packages
> hosted on PyPI are legal, then they have a heck of a research job to do
> -- there are how many packages?  Tens of thousands?  And nobody from PSF
> has ever examined them for legality.  If the PSF wants all uploaders to
> first make sure that their uploads are legal, then they have a heck of a
> user education job to do, because currently it looks like dozens of
> people at least have uploaded crypto to PyPI, and I'm willing to bet not
> one of them has notified the BXA.

The PSF has been careful about these things in the past and
we did notify the BIS (formerly BXA) of the fact that the Python
distribution included crypto code and some installers ship with
OpenSSL.

We haven't done that for the things on PyPI because last time
we did check, PyPI did not host any crypto code or only bindings
for it.

-- 
Marc-Andre Lemburg
eGenix.com

Professional Python Services directly from the Source  (#1, Aug 04 2009)
>>> Python/Zope Consulting and Support ...        http://www.egenix.com/
>>> mxODBC.Zope.Database.Adapter ...             http://zope.egenix.com/
>>> mxODBC, mxDateTime, mxTextTools ...        http://python.egenix.com/
________________________________________________________________________

::: Try our new mxODBC.Connect Python Database Interface for free ! ::::


   eGenix.com Software, Skills and Services GmbH  Pastor-Loeh-Str.48
    D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg
           Registered at Amtsgericht Duesseldorf: HRB 46611
               http://www.egenix.com/company/contact/