NCSA Home
Contact Us | Intranet | Search

ncsa

NCSA Kerberos Export Control

What is export control and how does it apply to Kerberos?

Export control is a set of United States laws restricting the export of certain technologies to Non-US citizens and permanent residents. Kerberos is effected by export control laws since it uses strong cryptogrphy to do encrypted sessions. An encrypted session is a telnet, rlogin, rsh or similar session where the text in both directions is encrypted to prevent snooping by a third party. This is a very useful feature of Kerberos since it allows one to securely type passwords or send other sensitive data without concern that it will be intercepted and used by a third party.

Updated 9/16/98: Our understanding now is that any one can use Kerberos software within the U.S. and Canada, however no one may take Kerberos software out of the U.S. and Canada. Hence we now provide Kerberos freely in AFS, but restrict it's access to NCSA machines.

Kerberos distribution to users is through the secure web server.

Back to NCSA Kerberos Information