On Thu, Mar 20, 2008 at 07:47:41AM -0400, Jesse Keating wrote: > On Thu, 2008-03-20 at 10:23 +0100, Patrice Dumas wrote: > > Then we have to register crypto packages somewhere such that the people > > in charge can do the paperwork, isn't it? Don't we need a guideline > > here? > > I actually need to prep a guideline that has all packages with crypto > technology block FE-LEGAL (if that's still the alias). We'll use that > to get an audit of the code to make sure its either not new crypto, or > if it is, alert the appropriate people for export filings. Hate to be difficult, but what about a package like ocaml-cryptokit which originates outside the US? http://pauillac.inria.fr/~xleroy/software.html#cryptokit (I don't think that particular package has anything which could be described as "new crypto"). Rich. -- Richard Jones, Emerging Technologies, Red Hat http://et.redhat.com/~rjones virt-top is 'top' for virtual machines. Tiny program with many powerful monitoring features, net stats, disk stats, logging, etc. http://et.redhat.com/~rjones/virt-top -- Fedora-packaging mailing list Fedora-packaging@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-packaging