Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am creating a packaged C++ library for creating http/https clients/servers. As part of that, I am planning on using either the botan ( or openssl tls wrappers. My library will be open-source (hosted on github) and also have downloadable binaries available so the user can start using it immediately without having to build the library.

In this situation, are there notifications/regulations that I have to fulfill prior to posting my source code and binaries?

share|improve this question
up vote 1 down vote accepted

Legal matters are inherently complex because they depend on the jurisdiction, and with 193 countries or so (193 UN members, plus a few odd cases like Vatican, not counting federal countries which induce extra splits) there are a lot of cases to cover. When proposing some opensource software for download, you are actually giving it away to the whole world so you are both providing it to other people and exporting it, so regardless of where in the world you live, and where the servers are, chances are that many regulations apply.

See this site for a lot of pointers and explanations.

My own prejudice suggests to me that since you don't specify which country you live in, then you are probably American, and you implicitly refer to US laws and regulations. Since 2011, there is a relaxed clause for opensource software, which might apply to your case. Or not. If it really worries you, ask a lawyer (which I am not).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.