Re: [apache-ssl] Using Verisign certificates
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [apache-ssl] Using Verisign certificates



>
>> > Please note that any implementation of SSLeay with in the United States is
>> > strictly illegal.
>
>This communication you received is a dramatic oversimplification and I
>hope it won't mislead any casual readers of this list. 
>
>A short rehash of the U.S. situation for those reading, just because I
>haven't seen one here in a while, and Ben very sensibly smirks at the
>whole U.S. patent scene -- <grin>

Thanks for the excellent summary.

I understand that there is also an explicit exception from RSA with
respect to educational sites.  We can download their RSA libraries
without fee, or something like that.  I seem to remember that as an edu
site, we're only supposed to use RSA's official code, but that it is
unlikely that they'd do anything about it otherwise.  But I'm really not
sure on all of this.  Maybe someone can clear that up?

Also, aren't RSA's (U.S) patents already starting to expire?  Is there a
list of their relevant patents, and expiration dates?  It was my impression
that this all becomes moot very soon.

      tom