Legal status of PGP in FRANCE
Arnoud Galactus Engelfriet
-----BEGIN PGP SIGNED MESSAGE-----
In article <3245eebd...@news.phil.uni-sb.de>,
stf...@med-rz.uni-sb.de (Frank Rehse) wrote:
> I know that PGP is banned in France, but what exactly do you have to
> expect when they catch you using it? What about the import/export
> into/from France?
As I understand it, you have to apply for a license and register the
secret key. I haven't heard of anyone who has actually *done* this
yet. The penalty apparently is up to 500,000 FF and/or 3 months jail.
Galactus
- --
To find out more about PGP, send mail with HELP PGP in the SUBJECT line to me.
E-mail: gala...@stack.urc.tue.nl - Please PGP encrypt your mail if you can.
Finger gala...@turtle.stack.urc.tue.nl for public key (key ID 0x416A1A35).
Anonymity and privacy site: <http://www.stack.urc.tue.nl/~galactus/remailers/>
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: cp850
iQCVAgUBMkbXIDyeOyxBaho1AQHICgP/aznSa+Dsng/nnTDTPDsQoYkhIvs8FxPw
7pXCOezFUkHxZhLIf0y9MQBS8L7zm3bTwWxukKgrWbysLxsxUCQG+2eJLHnhxiaF
7xobD2Yr7v2eNbLffRsatkFrFo91GypCg/AB1JI/LmdqTX4Fc33ehfS1OT2AMArg
QgoIXj24Qkk=
=kTnI
-----END PGP SIGNATURE-----
Harald Milz
Frank Rehse (stf...@med-rz.uni-sb.de) wrote:
>
> I know that PGP is banned in France, but what exactly do you have to
> expect when they catch you using it? What about the import/export
> into/from France?
Maybe just when travelling through France with an PGP-armed notebook...
Delirint isti galli.
--
Harald Milz (h...@seneca.muc.de)
This fortune is inoperative. Please try another.
were...@net1a.io.org
In <3245eebd...@news.phil.uni-sb.de>, stf...@med-rz.uni-sb.de (Frank Rehse) writes:
>-----BEGIN PGP SIGNED MESSAGE-----
>
>I know that PGP is banned in France, but what exactly do you have to
>expect when they catch you using it? What about the import/export
>into/from France?
Why not make sure they DON'T catch you?? Use steganography or hide it
in a uue'ed file.
---------------------------------------------------------------------------------------------
were...@io.org PGP Public Key Available on Request/via Keyserver
Internex Online public-k...@pgp.ai.mit.edu,
(Toronto,Can) Command: GET werewolf in message body
PGP FINGERPRINT: 02 54 67 39 AE 86 2E 63 C4 83 EF 3F F1 6D 96 BB
---------------------------------------------------------------------------------------------
Adam Back
In article <3245eebd...@news.phil.uni-sb.de> stf...@med-rz.uni-sb.de (Frank Rehse) writes:
> I know that PGP is banned in France, but what exactly do you have to
> expect when they catch you using it?
Jerome Thorel <j...@freenix.fr>, a freelance journalist, asked this
question to the head of DISSI (French SS, right).
His translation was that if you asked for permission to use PGP, they
would of course turn you down, but if you don't ask, and use it
anyway, they would do nothing to you. (From memory, he had it as a
sig for a while)
> What about the import/export into/from France?
If you can use it without much fear of reprisals, I guess you've got
to be able to import it in the first place, though the french laws
[Loi 90-1170 du 29/12/90 (art 28)] would suggest that this is strictly
illegal too.
Adam
--
#!/bin/perl -sp0777i<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<j]dsj
$/=unpack('H*',$_);$_=`echo 16dio\U$k"SK$/SM$n\EsN0p[lN*1
lK[d2%Sa2/d0$^Ixp"|dc`;s/\W//g;$_=pack('H*',/((..)*)$/)
Bruno Rosenthal
a...@dcs.exeter.ac.uk (Adam Back) wrote:
>In article <3245eebd...@news.phil.uni-sb.de> stf...@med-rz.uni-sb.de (Frank Rehse) writes:
>> I know that PGP is banned in France, but what exactly do you have to
>> expect when they catch you using it?
In France, PGP like any other crypto material (soft and/or hardware)
is not really banned (apart the US export facility re-PGP) but is
subject to authorization before usage
To use an authentification facility (such as signing a message) you
have to inform DISSI (which is not SS, but "DIrection de la Securite
des Systemes d'Information" or in english something like "Direction of
Information Systems Security" directly dependant from Prime Minister).
Usage may be granted (or not) directly by DISSI
To use a crypto facility, you have to inform DISSI, but authorization
is then granted (or not) by Prime Minister decree.
>Jerome Thorel <j...@freenix.fr>, a freelance journalist, asked this
>question to the head of DISSI (French SS, right).
>His translation was that if you asked for permission to use PGP, they
>would of course turn you down, but if you don't ask, and use it
>anyway, they would do nothing to you. (From memory, he had it as a
>sig for a while)
Of course, you can use any crypto by your own, but then you're
subject to heavy fines and/or jail if catched (can't remember exactly
how much, but can't dsort out if you're interested)
As the internet is not secure, any message can be intercepted by
anyone (IMHO). If such a message contains the BEGIN PGP characters
strings you may easily be convainced of usage if the interceptor is a
government one.
>> What about the import/export into/from France?
>If you can use it without much fear of reprisals, I guess you've got
>to be able to import it in the first place, though the french laws
>[Loi 90-1170 du 29/12/90 (art 28)] would suggest that this is strictly
>illegal too.
Import/export of crypto material is illegal unless granted by DISSI
(for import, it also must comply with the exporting country rules)
Bruno
gsa...@freenet.edmonton.ab.ca
Bruno Rosenthal (f6...@amsat.org) wrote:
: a...@dcs.exeter.ac.uk (Adam Back) wrote:
: >In article <3245eebd...@news.phil.uni-sb.de> stf...@med-rz.uni-sb.de (Frank Rehse) writes:
: >> I know that PGP is banned in France, but what exactly do you have to
: >> expect when they catch you using it?
: In France, PGP like any other crypto material (soft and/or hardware)
: is not really banned (apart the US export facility re-PGP) but is
: subject to authorization before usage
: To use an authentification facility (such as signing a message) you
: have to inform DISSI (which is not SS, but "DIrection de la Securite
: des Systemes d'Information" or in english something like "Direction of
: Information Systems Security" directly dependant from Prime Minister).
: Usage may be granted (or not) directly by DISSI
: To use a crypto facility, you have to inform DISSI, but authorization
: is then granted (or not) by Prime Minister decree.
: >Jerome Thorel <j...@freenix.fr>, a freelance journalist, asked this
: >question to the head of DISSI (French SS, right).
: >His translation was that if you asked for permission to use PGP, they
: >would of course turn you down, but if you don't ask, and use it
: >anyway, they would do nothing to you. (From memory, he had it as a
: >sig for a while)
: Of course, you can use any crypto by your own, but then you're
: subject to heavy fines and/or jail if catched (can't remember exactly
^^^^^^^^^^^^^^^^^^^^^^^
It is 500.000FF/3 months in jail
: how much, but can't dsort out if you're interested)
: As the internet is not secure, any message can be intercepted by
: anyone (IMHO). If such a message contains the BEGIN PGP characters
: strings you may easily be convainced of usage if the interceptor is a
: government one.
: >> What about the import/export into/from France?
: >If you can use it without much fear of reprisals, I guess you've got
: >to be able to import it in the first place, though the french laws
: >[Loi 90-1170 du 29/12/90 (art 28)] would suggest that this is strictly
: >illegal too.
: Import/export of crypto material is illegal unless granted by DISSI
: (for import, it also must comply with the exporting country rules)
: Bruno
--
gsa...@freenet.edmonton.ab.ca
Edgar Swank
a...@dcs.exeter.ac.uk (Adam Back) wrote on Tue, 1 Oct 1996 22:17:21 GMT:
>
>In article <3245eebd...@news.phil.uni-sb.de> stf...@med-rz.uni-sb.de (Frank
>Rehse) writes:
>> I know that PGP is banned in France, but what exactly do you have to
>> expect when they catch you using it?
>
>Jerome Thorel <j...@freenix.fr>, a freelance journalist, asked this
>question to the head of DISSI (French SS, right).
>
>His translation was that if you asked for permission to use PGP, they
>would of course turn you down, but if you don't ask, and use it
>anyway, they would do nothing to you. (From memory, he had it as a
>sig for a while)
I can confirm this to the extent that I have been corresponding with a French
citizen in France (Alsace) using PGP and nothing untoward has happened.
He ventured the opinion that anyone intercepting his Email to determine if it
were encrypted would be violating another law.
Also, you can observe a large number of PGP public keys with French internet
addresses on the -public- keyservers by searching for ".fr".
Edgar W. Swank <ed...@Garg.Campbell.CA.US>
(preferred)
Edgar W. Swank <Edgar...@Freemark.com>
Edgar W. Swank <Edgar...@Juno.com>
Edgar W. Swank <Edgar_W...@ilanet.org>
Home Page: http://members.tripod.com/~EdgarS/index.html
Bruno Rosenthal
ed...@garg.campbell.ca.us (Edgar Swank) wrote:
>I can confirm this to the extent that I have been corresponding with a French
>citizen in France (Alsace) using PGP and nothing untoward has happened.
Nice chance ...
>He ventured the opinion that anyone intercepting his Email to determine if it
>were encrypted would be violating another law.
Yes, it may, as intercepting E-mail like intercepting any private
correspondance is covered by correspondance secrecy law in France.
Anyway, it doesn't apply to subjects covered by I will call "state
security" of which crypto hard/soft belong.
>Also, you can observe a large number of PGP public keys with French internet
>addresses on the -public- keyservers by searching for ".fr".
May be they've got the authorization from authorities to use it :-)
Bye, Bruno