Re: SRP

[Russ Allbery <rra@stanford.edu>]

MiguelGea <Correo@miguelgea.com> writes:

> Hello debian-legal,
> I'm thinking about packaging SRP for debian. 

> Question 1: I'm not sure if there are any problem on packaging it. What
> do you think about?

Please note that SRP is patented; that's part of SRP's licensing that
tends to make people nervous.  The most current information that I have on
the SRP patent is at:

    <http://availtech.stanford.edu/Scripts/otl.cgi/docket?docket=97-006>

under licensing.  Please see the attached license grant; I haven't
reviewed it to determine whether it is suitable for Debian.  (Note that
there is also some debate over whether other patents cover the same
techniques, about which I cannot comment since I know very little.)

While I am at Stanford, I fear I have no influence over the licensing of
SRP, the status of the patent, or any good way to get more information
that isn't equally accessible to any of you.  I just happen to be fairly
familiar with some of the issues around SRP because it has a long and
controversial history locally here.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>