PGP

Does anyone know what the laws are regarding the export of PGP into 
Canada?  I know that it is not allowed to exported overseas but what is 
the ruling on into Canada.  Some sites say that it can be exported into 
Canada and others say that it can't.  Can anyone out there give me some 
information on this topic?

--

	     T H E  M A N , T H E  M Y T H , T H E  L E G E N D . 
******************************************************************************
* Dylan "Still" Boudreau	* Knowledge is proud that she knows so much; *
* Internet: x93ojg@stfx.ca	* Wisdom is humble that she knows no more.   *
******************************************************************************
*       Homepage: http://juliet.stfx.ca/people/stu/x93ojg/welcome.html       *  
******************************************************************************

		When someone says, "That's a good question." 
		 You can be sure it's a lot better than the 
		         answer you're going to get.

-----BEGIN PGP SIGNED MESSAGE-----

<fearing the wrath of the cpunks, but deciding that it's better to get this
`sorted out' than keep on being wrong>

Please take all of the following as being mystatements of
what I think, not statements of absolute truth. [That is,
call the CEC yourself.]

It is legal for a Canadian citizen to import PGP into Canada
under Canadian law. It is legal to use either the international
or yanqui versions in Canada--software patents don't apply [I
don't think].

It is legal for an American to give pgp to an American citizen,
a permanent legal resident alien of the United States, or to a
Canadian citizen, providing the receiver is in Canada or the
United States.

It is *illegal* for a Canadian to export pgp anywhere except the
U.S., if the pgp came from the U.S. and no substantial changes
have been made to it.

For more docs, see
http://www.io.org/~samwise/crypto/
[yes, I know, it hasn't changed in a while, and there's some stuff
missing [such as the Area Control List], but the most important
thing on that web page is the information about who to ask: there's
an office in Halifax]

My recommendation: get the international version of PGP. [Unless, of
course, the above statements are wrong, in which case my reasoning
in favour of the international version are faulty.]

richard

- --
Richard Martin                           I DON'T SPEAK FOR ALIAS|WAVEFRONT
Alias|Wavefront - Toronto Office [Co-op Software Developer, Games Team]
rmartin@aw.sgi.com/g4frodo@cdf.toronto.edu      http://www.io.org/~samwise
Trinity College UofT ChemPhysCompSci 9T7+PEY=9T8 Shad Valley Waterloo 1992

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMLOLkh1gtCYLvIJ1AQHkfAQAkz8HnhxC0S59PHCajFQYGjp1dCVNzbf2
JZnv4epN/KSr6K1f/v2fLF9PoCylADHulHze/oeN1T3gEel6MfNQheZTFofu3381
y9O39q4lmRyS6YrL07T9A3hr3taCrx3W9L7HZancKmKQk1EyNHgG+0ECiDR20Lp9
H0AyGkGSmng=
=hN9v
-----END PGP SIGNATURE-----

On Wed, 22 Nov 1995, Richard Martin wrote:

> It is legal for a Canadian citizen to import PGP into Canada
> under Canadian law. It is legal to use either the international
> or yanqui versions in Canada--software patents don't apply [I
> don't think].
Yup. RSA's only patented in one country- the USA. Though maybe with NAFTA...?

> It is *illegal* for a Canadian to export pgp anywhere except the
> U.S., if the pgp came from the U.S. and no substantial changes
> have been made to it.

All the same if it was freeware crypto software and completely written 
outside the US, I'm under the understanding that you can export without a 
license. IANAL, I may be wrong. Do double check.

Do mail the export controls division of external affairs and
ask for "Canada's Export Controls", the "General Software Note" and
a specific opinion regarding the exportability of pgp, US crypto,
non-US crypto and freware vs. commercial wares. They also hadn't
made up their mind as to whether ftp constituted export.

They have branches in all major Canadian cities, so I'll mail the nearest
addresses to those who are interested (I'm not at home right now).

> My recommendation: get the international version of PGP. [Unless, of
> course, the above statements are wrong, in which case my reasoning
> in favour of the international version are faulty.]

Sorry to say, it would be pointless, you wouldn't be able to export it from 
here unless it was totally rewritten outside the US (which it I take it 
it isn't, right?)

I think people may have misunderstood me.  I am able to get PGP, I just 
want to know if it is legal for me to do so as I want to install it on a 
network and am not a big fan of jail.  It would do serious things to my 
future in the Canadian military.  All I wan't to know quite simply is "Is 
it legal for me to ftp a copy of PGP.  The MIT site says that it is OK as 
long as I am exprting it to Canada for use on a machine in Canada.  
Although other sites say that it is not permitted to be exported to Canada.
 

--

	     T H E  M A N , T H E  M Y T H , T H E  L E G E N D . 
******************************************************************************
* Dylan "Still" Boudreau	* Knowledge is proud that she knows so much; *
* Internet: x93ojg@stfx.ca	* Wisdom is humble that she knows no more.   *
******************************************************************************
*       Homepage: http://juliet.stfx.ca/people/stu/x93ojg/welcome.html       *  
******************************************************************************

		When someone says, "That's a good question." 
		 You can be sure it's a lot better than the 
		         answer you're going to get.

You can try to get PGP from the MIT site but it may not allow you to do 
so if it does not recognize your address as being Canadian. I tried to 
get PGP-Phone and it told me that it did not think that I was a Canadian. 
I wrote to the administrator but have never received a reply. I checked 
about a week ago and I still could not get the file.
Tim Philp

===================================
For PGP Public Key, Send E-mail to:
pgp-public-keys@swissnet.ai.mit.edu
In Subject line type:
GET PHILP
===================================

On Nov 23,  7:41, Tim Philp wrote:
> Subject: Re: PGP in Canada
> You can try to get PGP from the MIT site but it may not allow you to do
> so if it does not recognize your address as being Canadian.

You can also get pgp from a Canadian site.

Get the file

ftp://ftp.wimsey.com/pub/crypto/software/README

for instructions and conditions (export restrictions).

-- 
Mark Henderson -- markh@wimsey.bc.ca, henderso@netcom.com, mch@squirrel.com
PGP 1024/C58015E3 fingerprint=21 F6 AF 2B 6A 8A 0B E1 A1 2A 2A 06 4A D5 92 46
cryptography archive maintainer  --  ftp://ftp.wimsey.com/pub/crypto
ftp://ftp.wimsey.com/pub/crypto/sun-stuff/change-sun-hostid-1.5.1.tar.gz

Is pgp able to be put on a university network and used by all the 
students?  I am again referring to use in Canada.

--

	     T H E  M A N , T H E  M Y T H , T H E  L E G E N D . 
******************************************************************************
* Dylan "Still" Boudreau	* Knowledge is proud that she knows so much; *
* Internet: x93ojg@stfx.ca	* Wisdom is humble that she knows no more.   *
******************************************************************************
*       Homepage: http://juliet.stfx.ca/people/stu/x93ojg/welcome.html       *  
******************************************************************************

		When someone says, "That's a good question." 
		 You can be sure it's a lot better than the 
		         answer you're going to get.

On Thu, 23 Nov 1995, Tim Philp wrote:

> You can try to get PGP from the MIT site but it may not allow you to do 
> so if it does not recognize your address as being Canadian. I tried to 
> get PGP-Phone and it told me that it did not think that I was a Canadian. 
> I wrote to the administrator but have never received a reply. I checked 
> about a week ago and I still could not get the file.
> Tim Philp
> 
I already downloaded a copy last week but I deleted it because I didn't 
knwo if it ws legal to use it and my Sys admin would probable revoke my 
account if it was illegal.  I was talking to him and he told me that if I 
can prove that it is legal he will let me use it.
 

--

	     T H E  M A N , T H E  M Y T H , T H E  L E G E N D . 
******************************************************************************
* Dylan "Still" Boudreau	* Knowledge is proud that she knows so much; *
* Internet: x93ojg@stfx.ca	* Wisdom is humble that she knows no more.   *
******************************************************************************
*       Homepage: http://juliet.stfx.ca/people/stu/x93ojg/welcome.html       *  
******************************************************************************

		When someone says, "That's a good question." 
		 You can be sure it's a lot better than the 
		         answer you're going to get.