Re: Digest Authentication
Joseph Arceneaux (jla@samsara.com)
Tue, 2 Jan 96 12:30 PST
Date: Sun, 31 Dec 1995 20:56:47 -0800 (PST)
From: Ned Freed <NED@innosoft.com>
Cc: ams@terisa.com, http-wg%cuckoo.hpl.hp.com@hplb.hpl.hp.com,
www-security@ns2.rutgers.edu
The bottom line is that if you intend to export anything that uses
cryptographic methods, you'd best hire a lawyer familiar with export law and
get approval for it. You'll probably have no problem with authentication.
Ned
The ITAR has a specific exception for authentication in financial
applications, but this applies only to authentication for access
control, and does not extend to, say, the transaction itself.