Details
-
Question
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
-
None
Description
I've just understood that Spark may be an ASF product that requires registration, and an entry at http://www.apache.org/licenses/exports/ , because its distribution includes two cryptography libraries that are subject to export control. These are Apache Commons Crypto, and Bouncy Castle. Spark itself doesn't implement any encryption. (Bouncy Castle is, actually, even unused but was still included in the distro; we're fixing that.)
I'm writing to clarify that, yes, this means Spark needs to follow the steps at http://www.apache.org/dev/crypto.html to update this page and send a notice?