Does using SSL mean you have to say your app uses Cryptography? -
i ready submit windows 8 store app store. part of process must answer question:
does app call, support, contain, or use cryptography or encryption?
it goes on mention these possibilities:
- any use of digital signature, such authentication or integrity checking
- encryption of data or files app uses or accesses
- key management, certificate management, or interacts public key infrastructure
- using secure communication channel such ntlm, kerberos, secure sockets layer (ssl), or transport layer security (tls)
- encrypting passwords or other forms of information security
- copy protection or digital rights management (drm)
- antivirus protection
(emphasis mine.) there exemptions:
- password encryption
- copy protection
- authentication
- digital rights management
- using digital signatures
my app windows phone app limited ability store or export data locally, have functionality backup or restore skydrive. (for purposes of question fact skydrive may change name not relevant.) put same capability windows store app. connection skydrive https
- in other words using ssl.
does mean need export commodity classification number (eccn)? really?
from page, understanding export restrictions on cryptography, looks answer yes, ssl counts unless not transporting content on wire. i'm not lawyer.
does app call, support, contain, or use cryptography or encryption?
this question helps determine if app uses type of cryptography governed export administration regulations. question includes examples shown in list here; remember list doesn't include every possible application of cryptography.
important when answer question, consider not code wrote app, software libraries, utilities , operating system components app includes or links to.
- any use of digital signature, such authentication or integrity checking
- encryption of data or files app uses or accesses
- key management, certificate management, or interacts public key infrastructure
- using secure communication channel such ntlm, kerberos, secure sockets layer (ssl), or transport layer security (tls)
- encrypting passwords or other forms of information security
- copy protection or digital rights management (drm)
- antivirus protection
for complete , current list of cryptographic applications, see ear controls items use encryption.
is cryptography or encryption limited 1 or more of tasks listed here?
if answered yes first question, second question lists of applications of cryptography not restricted. here unrestricted tasks:
- password encryption
- copy protection
- authentication
- digital rights management
- using digital signatures
if app calls, supports, contains, or uses cryptography or encryption task not in list answer question no.
Comments
Post a Comment