From owner-freebsd-security@FreeBSD.ORG Wed Apr 12 19:12:33 2006 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2632B16A400 for ; Wed, 12 Apr 2006 19:12:33 +0000 (UTC) (envelope-from kris@obsecurity.org) Received: from elvis.mu.org (elvis.mu.org [192.203.228.196]) by mx1.FreeBSD.org (Postfix) with ESMTP id D4EB543D9D for ; Wed, 12 Apr 2006 19:12:12 +0000 (GMT) (envelope-from kris@obsecurity.org) Received: from obsecurity.dyndns.org (elvis.mu.org [192.203.228.196]) by elvis.mu.org (Postfix) with ESMTP id 159521A3C33; Wed, 12 Apr 2006 12:11:34 -0700 (PDT) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id 589E65157B; Wed, 12 Apr 2006 15:11:33 -0400 (EDT) Date: Wed, 12 Apr 2006 15:11:33 -0400 From: Kris Kennaway To: Tom Message-ID: <20060412191133.GA26006@xor.obsecurity.org> References: <20060412112332.L47470@evil.minions.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="RnlQjJ0d97Da+TV1" Content-Disposition: inline In-Reply-To: <20060412112332.L47470@evil.minions.com> User-Agent: Mutt/1.4.2.1i Cc: freebsd-security@freebsd.org Subject: Re: Question about Export Restrictions X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Apr 2006 19:12:33 -0000 --RnlQjJ0d97Da+TV1 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Apr 12, 2006 at 11:32:40AM -0700, Tom wrote: > I work for a company that builds an appliance based on FreeBSD (4.X) and= =20 > we've just had our first question come up about exporting the appliance= =20 > out of the US (specifically the EU). >=20 > Since FreeBSD uses OpenSSL/OpenSSH, I'm under the impression that we need= =20 > to gut out anything higher than 56bit (3DES/etc) crypto out of it. Only if it's still 1995 in your timezone, AFAIK. Kris --RnlQjJ0d97Da+TV1 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (FreeBSD) iD8DBQFEPVDkWry0BWjoQKURAmabAJ9ilyLkAoNTXgAYw7d34HjFWqMXnQCfROBV r3frUifGdwGyOaJGwZ7ZUqk= =aCZJ -----END PGP SIGNATURE----- --RnlQjJ0d97Da+TV1--