如何在我的应用程序中选择“出口合规性"? [英] How to pick Export Compliance in my app?

问题描述

我正在提交审查，但不确定Export Compliance问题Is your app designed to use cryptography or does it contain or incorporate cryptography? (Select Yes even if your app is only utilizing the encryption available in iOS or macOS.)我的应用程序中唯一的互联网功能是在第一个屏幕上使用Facebook Login供用户注册和登录.我使用Firebase作为后端.那我需要选择Yes吗?

I am submitting for review and not sure about the Export Compliancequestion Is your app designed to use cryptography or does it contain or incorporate cryptography? (Select Yes even if your app is only utilizing the encryption available in iOS or macOS.) The only internet function in my app is using Facebook Loginon first screen for users to register and login. And I use Firebase as backend. So do I need to select Yes?

如果我要为第一个问题选择Yes，那么第二个问题Does your app qualify for any of the exemptions provided in Category 5, Part 2 of the U.S. Export Administration Regulations?我也应选择Yes，对吗?谢谢！

If I should pick Yes for first question, then second question Does your app qualify for any of the exemptions provided in Category 5, Part 2 of the U.S. Export Administration Regulations? I should also pick Yes, right? Thanks!

推荐答案

如果唯一的用途是与Facebook的https连接，我将回答否".在WWDC16上，我曾两次向安全团队特别询问这个问题，并被告知他们不认为HTTPS是对该问题的加密.

If the only use is an https connection to Facebook I would answer no. At WWDC16 I specifically asked this question twice of the security team and was told that they did not consider HTTPS to be encryption for this question.

更多:

美国新法规于2016年9月20日生效.新法规取消了仅因为使用加密即可注册您的应用程序的要求.

New U.S. legislation went into effect on September 20th, 2016. The new regulation removes the requirement to register your app simply because it uses encryption.

一些链接到2016-09-20的更改:BIS信息安全控件的更改带来了宽松的控件，取消了注册要求

Some links to the 2016-09-20 changes: Changes to BIS's information security controls bring relaxed controls, removal of registration requirement Dentons, US Implements Regulation Changes for Encryption Products, Software and Technology Shadden, Export Administration Regulation (EAR) BIS.

请注意，其他国家(包括法国)也有涉及加密销售的法规.

Note that other countries also have regulations covering sale of encryption including France.

这是否会影响回答Apple问题尚不清楚.如果我的应用程序直接使用加密功能(例如，我的API直接调用AES)，我将回答是"并提供上述信息.

How this affects answering the Apple question is unclear. If my app used encryption directly (my API calls directly to AES for example) I would answer "yes" and supply the above information.

免责声明:这不是法律建议.

Disclaimer: This is not legal advice.

这篇关于如何在我的应用程序中选择“出口合规性"?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！