[Catalog-sig] Pull request to migrate PyPI to bcrypt

[M.-A. Lemburg]

On 11.02.2013 20:41, Antoine Pitrou wrote:
> M.-A. Lemburg <mal <at> egenix.com> writes:
>>
>> Let's please not get paranoid over all this. As long as the parameters
>> remain configurable, we can approach these things in small steps and
>> don't need to get all tied up in discussions about how to turn
>> PyPI into Fort Knox 
> 
> Fort Knox is in the US, which would create issues with crypto export laws,
> no?

Oh, PyPI is as well... and it comes with built-in export via the
mirror framework ;-)

Here's some background information, if you want to host crypto code
on PyPI:

http://www.bis.doc.gov/encryption/encfaqs6_17_02.html#2
http://www.ecfr.gov/cgi-bin/retrieveECFR?gp=&SID=306f1d2ac33ae74f6d060e14258309ba&r=PART&n=15y2.1.3.4.22#15:2.1.3.4.22.0.1.3
http://www.ecfr.gov/cgi-bin/text-idx?c=ecfr&rgn=div5&view=text&node=15:2.1.3.4.25&idno=15#15:2.1.3.4.25.0.1.13

For a more comprehensible writeup, see how the Apache foundation
handles these things:

http://www.apache.org/dev/crypto.html

Finally, to make things more complicated, this whole EAR thing is constantly
changing, see e.g.
http://cryptome.org/0003/bis010711.htm
http://www.bis.doc.gov/encryption/default.htm
http://www.bis.doc.gov/encryption/question2.htm

At the moment, it's probably best to send an email to the BIS
if you make the software available at some URL for the first
time. That satisfies the TSU reporting requirements.

-- 
Marc-Andre Lemburg
eGenix.com

Professional Python Services directly from the Source  (#1, Feb 11 2013)
>>> Python Projects, Consulting and Support ...   http://www.egenix.com/
>>> mxODBC.Zope/Plone.Database.Adapter ...       http://zope.egenix.com/
>>> mxODBC, mxDateTime, mxTextTools ...        http://python.egenix.com/
________________________________________________________________________

::::: Try our mxODBC.Connect Python Database Interface for free ! ::::::

   eGenix.com Software, Skills and Services GmbH  Pastor-Loeh-Str.48
    D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg
           Registered at Amtsgericht Duesseldorf: HRB 46611
               http://www.egenix.com/company/contact/