ssl - 使用 SSL 是否意味着您必须说您的应用程序使用密码学？

Question

我几乎准备好向商店提交 Windows 8 应用商店应用程序。作为此过程的一部分，您必须回答 question :

Does your app call, support, contain, or use cryptography or encryption?

它继续提到这些可能性:

• 数字签名的任何使用，例如身份验证或完整性检查
• 对您的应用使用或访问的任何数据或文件进行加密
• key 管理、证书管理或与公钥基础设施交互的任何事物
• 使用安全通信 channel ，例如 NTLM、Kerberos、安全套接字层 (SSL) 或传输层安全 (TLS)
• 加密密码或其他形式的信息安全
• 版权保护或数字版权管理 (DRM)
• 防病毒保护

(强调我的。)有一些异常(exception)情况:

• 密码加密
• 版权保护
• 身份验证
• 数字版权管理
• 使用数字签名

我的应用程序最初是 Windows Phone 应用程序，在本地存储或导出数据的能力有限，因此我们具有备份到 SkyDrive 或从中恢复的功能。 (就此问题而言，SkyDrive 可能很快更改其名称这一事实无关紧要。)我们将同样的功能放入 Windows 应用商店应用程序中。与 SkyDrive 的连接是 https - 换句话说，我们正在使用 SSL。

这是否意味着我需要导出商品分类号 (ECCN)？真的吗？

Answer 1

从此页面，Understanding export restrictions on cryptography ，看起来答案是肯定的，除非您不通过网络传输内容，否则 SSL 很重要。但我不是律师。

Does your app call, support, contain, or use cryptography or encryption?

This question helps you determine if your app uses a type of cryptography that is governed by the Export Administration Regulations. The question includes the examples shown in the list here; but remember that this list doesn't include every possible application of cryptography.

Important When you answer this question, consider not only the code you wrote for your app, but also all the software libraries, utilities and operating system components that your app includes or links to.

• Any use of a digital signature, such as authentication or integrity checking
• Encryption of any data or files that your app uses or accesses
• Key management, certificate management, or anything that interacts with a public key infrastructure
• Using a secure communication channel such as NTLM, Kerberos, Secure Sockets Layer (SSL), or Transport Layer Security (TLS)
• Encrypting passwords or other forms of information security
• Copy protection or digital rights management (DRM)
• Antivirus protection

For the complete and current list of cryptographic applications, see EAR Controls for Items That Use Encryption.

Is the cryptography or encryption limited to one or more of the tasks listed here?

If you answered yes to the first question, then the second question lists some of the applications of cryptography that are not restricted. Here are the unrestricted tasks:

• Password encryption
• Copy protection
• Authentication
• Digital rights management
• Using digital signatures

If your app calls, supports, contains, or uses cryptography or encryption for any task that is not in this list then your answer to this question is No.