Re: Pgp in Europe

-----BEGIN PGP SIGNED MESSAGE-----

- -----BEGIN PGP SIGNED MESSAGE-----

Karl Lundkvist writes:
> Does anyone know a way to get Pgp 2.6.2 by ftp, mail or something in 
> Europe? All I can find that I'm allowed to download from the net is 
> 2.3... 

The U.S. govt. doesn't want you to get PGP from the U.S., but you are
(presumably) not a U.S. resident or citizen, so U.S. laws don't apply to you.
As long as _Swedish_ law doesn't bar you from importing strong cryptography
into Sweden, you can grab PGP from wherever you like.

	-L. Futplex McCarthy

- -----BEGIN PGP SIGNATURE-----
Version: 2.6.1

iQCVAwUBLvXyIWf7YYibNzjpAQGY+gP/ZxIH2glPB4RVz+kDjQj4FvxLGxTd3qMk
mMbaFyMS5sfDV8tcmkSK4Ll5FWZwT2jede4JYXov/nbr8gIAjcTAvD0ejtJzyYxK
FQx+nf9JUr2wViLU+6gm86ea1y7sH/wHjMNhnfwLxh50G9KenZZW+Od5Jzw/t8tR
+qcaUwNGDfg=
=OUBK
- -----END PGP SIGNATURE-----
- ---
[This message has been signed by an auto-signing service.  A valid signature
means only that it has been received at the address corresponding to the
signature and forwarded.]

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Gratis auto-signing service

iQBFAwUBLvXzayoZzwIn1bdtAQGDZQGAlQQ3P9X513paHxgmDwh84u1KmNJR9aUZ
3XMHg0Jl08FELed6hI8XJUUXep1y4DK8
=MATE
-----END PGP SIGNATURE-----

On Dec 19,  3:56pm, L. McCarthy wrote:
> The U.S. govt. doesn't want you to get PGP from the U.S., but you are
> (presumably) not a U.S. resident or citizen, so U.S. laws don't apply to you.
> As long as _Swedish_ law doesn't bar you from importing strong cryptography
> into Sweden, you can grab PGP from wherever you like.

As has been discussed many times before, it is not that clear cut.  Legal
opinion I have gotten said that the US government would almost certainly
consider its laws violated if a "foreign national" fetched a piece of ITAR
controlled software from a US site, although it's ability to prosecute
would be limited _until_that_individual_entered_US_territory_.

That's a big gotcha, folks.  Let's not forget Phil Z's recent experience
with US customs.

The legal opinion I have gotten also suggested that traffic passing through the
US (but not having a source or destination with that legal juristiction)
is a very grey legal area, and even might depend on whether the signal
travelled via satellite or cable (there might even be loopholes if it went
over US territory - via a satelite link - rather than travelling through it
via landlines.)  Non-deterministic routing also would make it difficult
to prosecute, although the fact that they are investigating Phil for writing
the software makes me wonder just how much reality is involved in their
decision to proceed with legal action.

I personally would be extremely cautious about fetching anything from another
country unless that country specifically allowed export of crypto software.
Fortunately, most European countries do, and there are several good crypto
sites there.

							Ian.

#include <std.disclaimer>  "I speak only for myself."