Browse code

Fix #1993: add explanation for export restrictions

Andy Rothfusz authored on 2013/09/25 03:04:08
Showing 1 changed files
... ...
@@ -1,11 +1,41 @@
1 1
 Docker
2 2
 Copyright 2012-2013 dotCloud, inc.
3 3
 
4
-This product includes software developed at dotCloud, inc. (http://www.dotcloud.com).
4
+This product includes software developed at dotCloud,
5
+inc. (http://www.dotcloud.com).
5 6
 
6
-This product contains software (https://github.com/kr/pty) developed by Keith Rarick, licensed under the MIT License.
7
+This product contains software (https://github.com/kr/pty) developed
8
+by Keith Rarick, licensed under the MIT License.
7 9
 
8
-Transfers of Docker shall be in accordance with applicable export controls of any country and all other applicable
9
-legal requirements.  Docker shall not be distributed or downloaded to or in Cuba, Iran, North Korea, Sudan or Syria
10
-and shall not be distributed or downloaded to any person on the Denied Persons List administered by the U.S.
10
+Transfers of Docker shall be in accordance with applicable export
11
+controls of any country and all other applicable legal requirements.
12
+Docker shall not be distributed or downloaded to or in Cuba, Iran,
13
+North Korea, Sudan or Syria and shall not be distributed or downloaded
14
+to any person on the Denied Persons List administered by the U.S.
11 15
 Department of Commerce.
16
+
17
+What does that mean? 
18
+Here is a further explanation from our legal counsel:
19
+
20
+Like all software products that utilize cryptography, the export and
21
+use of Docker is subject to the U.S. Commerce Department's Export
22
+Administration Regulations (EAR) because it uses or contains
23
+cryptography (see
24
+http://www.bis.doc.gov/index.php/policy-guidance/encryption).  Certain
25
+free and open source software projects have a lightweight set of
26
+requirements, which can generally be met by providing email notice to
27
+the appropriate U.S. government agencies that their source code is
28
+available on a publicly available repository and making the
29
+appropriate statements in the README.
30
+
31
+The restrictions of the EAR apply to certain denied locations
32
+(currently Iran, Sudan, Syria, North Korea, or Cuba) and those
33
+individuals on the Denied Persons List, which is available here:
34
+http://www.bis.doc.gov/index.php/policy-guidance/lists-of-parties-of-concern/denied-persons-list.
35
+If you are incorporating Docker into a new open source project, the
36
+EAR restrictions apply to your incorporation of Docker into your
37
+project in the same manner as other cryptography-enabled projects,
38
+such as OpenSSL, almost all Linux distributions, etc.
39
+
40
+For more information, see http://www.apache.org/dev/crypto.html and/or
41
+seek legal counsel.