clarify export compliance information for ios #515
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
I think something like this should address the ios issues. Defold-engine only code meets the exemption requirements for the US, EU, and France. It's unlikely but possible that someone creates a project that would change that.
As for the French declaration - an in-depth look of the requirements are in the details below. But it is a mistake on Apple's part to be requiring the document for all apps with cryptography in France.
I included the link to the form, because it's more than Apple provides, but I didn't feel instructions for filling it out were appropriate for the manual - where would it go best?
Closes #322
Analysis of each country's law
US Rules
Per https://www.bis.doc.gov/index.php/all-articles/15-policy-guidance/encryption/560-encryption-faqs#15
Additionally, the use of industry standard algorithms means US export requirements do not apply to Defold.
French Rules
Per https://cyber.gouv.fr/controle-reglementaire-sur-la-cryptographie-demarches-accomplir
Use in France requires no declaration to ANSSI (Utilisation en France). Import might (Importation en France).
Either way, the table of exceptions specifies that Protection against duplication is exempt for any operation (Protection contre la duplication - Exemption pour toute opération).
For confirmation: Décret n°2007-663 du 2 mai 2007
Chapter 1 Article 1 states that usage of cryptology in Annex 1 is exempt from the processes of the law.
Annex 1, Category 6: Equipment designed to limit the protection of software or computer data against copying or illegal use and the cryptography is not accessible to the user.
French law is of course also compliant to EU law:
Delegated Regulation (EU) No 1382/2014