Re: Digest Authentication

Joseph Arceneaux (jla@samsara.com)
Tue, 2 Jan 96 12:30 PST


   Date: Sun, 31 Dec 1995 20:56:47 -0800 (PST)
   From: Ned Freed <NED@innosoft.com>
   Cc: ams@terisa.com, http-wg%cuckoo.hpl.hp.com@hplb.hpl.hp.com,
	   www-security@ns2.rutgers.edu

   The bottom line is that if you intend to export anything that uses
   cryptographic methods, you'd best hire a lawyer familiar with export law and
   get approval for it. You'll probably have no problem with authentication.

				   Ned

The ITAR has a specific exception for authentication in financial
applications, but this applies only to authentication for access
control, and does not extend to, say, the transaction itself.