[Guy Harris <guy@xxxxxxxxxx>]

On Mon, Dec 16, 2002 at 03:51:48PM -0600, Bettley, Carolyn wrote:
> If it contains encryption, I will need to know if your company has submitted
> at least a one-time review to the USG for their review, or have already
> rec'd ENC approval?

"My company" doesn't produce Ethereal.  There *IS* no "company"
responsible for producing Ethereal; it's not a commercial product, it's
just the product of a bunch of people writing code.

Ethereal doesn't include any code to encrypt stuff; it does, however,
include code to decrypt stuff.  I have no idea whether that would count
as "encryption" from the standpoint of US export control regulations (or
the export control regulations of any other country in which Ethereal
developers live, or in which there exist sites from which one can
download Ethereal).

I don't know whether anybody's ever submitted it for review; I suspect
not.  It's not as if we have teams of export control lawyers are our
beck and call....

For what it's worth, every single line of code in Ethereal, including
that code, is open-source, so it's not as if it's hard to get that code
elsewhere, but we're dealing with bureaucracies here, so rationality is
only a minor consideration....