This is written before January/February 2000 changes by US Government conserning network distributability of cryptographic source and derived binaries.

At least the sources are distributable as is, but it is somewhat uncertain if binaries derived from distributed sources with distributed configuration is equally freely distributable...


Linux distributors, RedHat et.al., are now publishing cryptographic code in their distributions without any apparent controls, not even a prompt for a user to acknowledge that they are installing cryptographic code... (2002-Sep-12)

Apparently everything is fine as long as you don't know yourself that person X coming to download something is a member of the Enemy of the Week of USA.. (and how could you find that out ?)


CRYPTO WARNING

This warning is to organizations, and individuals resident in USA, and considering including ZMailer in source form to some publication they do; e.g. CDROM, FTP archive, etc.

This software contains hooks to use external cryptographic package (OpenSSL) to do traffic encryption over the SMTP channel.

Because of the US Government's view of the things, you might get nasty comments from US export control people if you include the original sources of this MTA to e.g. a CDROM.

I am not a lawyer with detailed knowledge of what is allowed, and what isn't for US citicens, but you can always point to the sources at ftp://ftp.funet.fi/pub/unix/mail/zmailer/ and at the web-server http://www.zmailer.org/

There is a way to quickly construct US ITAR compliant source, by executing command 'make dist-usa', the resulting TAR package should be exportable out from USA.

/Matti Aarnio - 1999-May-14