在iOS应用中从http切换到https会在发布时出现导出合规性问题 [英] Switching from http to https in iOS App brings up Export Compliance issues when publishing
问题描述
我们最近决定在今年夏天更新我们的几个应用，将它们从http更改为https，以便遵循2017年1月生效的新Apple指南。
<转移到应用程序和从应用程序转移的唯一内容是产品信息，没有用户信息或任何甚至远程敏感的东西。但我们希望尽早遵守，以便我们以后不必担心。
问题：
Apple 似乎强迫我们处理美国出口合规法，该法要求我们获得出口商注册号（ERN）和 SNAP-R 的批准需要公司标识号（CIN）。我想，我不是律师。
现在这个问题得到了一定程度的回答这里但是这已经超过3年了，如果我了解发生了什么，那么每个与他们的应用建立http连接并且在美国境外提供的人都会经历这个。
如果是这种情况那么我会期望对大多数iOS应用开发者需要切换到https的内容有一个非常明确的解释。
但是我对此并没有太多了解，我对确切的要求（如果有的话）感到困惑。
任何律师都表示赞赏。
免责声明：这些是我多次回合后的结果具有不同出口管制团队成员的电子邮件，但这些结果特定于我们自己的应用程序，可能不适用于其他人。
简短回答：
尽管使用 SQLCipher 并使用HTTPS进行所有数据传输，我们的应用程序导出控制分类编号（ECCN）为 EAR99 ，这意味着他们不需要任何数据传输美国出口许可证（无SNAP-R）。点击发布按钮！
更多详细信息：
我的公司聘请了一家专门对产品进行分类的第三方公司要出口。在发现之后我将所有应用信息提交给他们，他们认为我们不属于出口管制保护伞。
We recently decided to update a couple of our apps this summer to switch them from http to https in order to follow the new Apple guidelines which go into affect January 2017.
The only thing transferred to and from the app is product information, no user info or anything even remotely sensitive. But we want to comply early so that we don't have to worry about it later.
The question:
Apple seems to be forcing us to deal with US Export Compliance law which requires us to get an approval for an Exporter Registration Number (ERN), and a SNAP-R which requires a Company Identification Number (CIN). I think, I am no lawyer.
Now this question was somewhat answered here but that was more than 3 years ago, and if I understand what is happening, everyone who makes an http connection with their app and has it available outside the US is going through this.
If that's the case then I would would have expected a very clear explanation on what switching to https will require for most iOS app developers.
However I have not found much on this and I am confused on what the exact requirements are (if any).
Any counsel is appreciated.
Disclaimer: These were my results after many rounds of emails with different export control team members, however these results are specific to our own apps and may not be applicable to others.
Short answer: Despite having an encrypted database using SQLCipher and using HTTPS for all of our data transfers, our apps Export Control Classification Number (ECCN) is "EAR99" meaning they do not need any US export license (no SNAP-R). Hit that publish button!
More details: My company employ a third-party company that specializes in classifying products that are meant to be exported. After finding that out I submitted all of our app information to them and they decided that we did not fall under the export control umbrella.
这篇关于在iOS应用中从http切换到https会在发布时出现导出合规性问题的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
