Re: Double Encryption Illegal?

In article <8hrbrf$a5b$1_at_nnrp1.deja.com>, Crypto-Boy <crypto_boy_at_my-deja.com> wrote:

> On page 10-10 and 10-14 of the Oracle Advanced Security Administrator's
> Guide (from release 8.1.6 December 1999), it says the following (in bold
> no less):
>
> "Warning: You can use SSL encryption in combination with another Oracle
> Advanced Security authentication method. When you do this, you must
> disable any non-SSL encryption to comply with government regulations
> prohibiting double encryption."
>
> Since when is it illegal to double encrypt in the US? I don't believe
> this is true.
>
This is to make it still breakable. All the noise about unregulated domestic crypto seems to justify you doing just about anything crypto you want to.

Regulations can be mere whims, expressive of wishful thinking; government regulations are often written to make thing convenient for the government. Good regulations make good sense, but government does not have a right to get everything it wants to the expense of needed security of the public; your business may be none of theirs.

-- 
If you wonder worry about the future enough to adversely limit
yourself in the present, you are a slave to those who sell security.