[NTLUG:Discuss] SSL and Patents

[David]

On Wed, Apr 02, 2003 at 01:27:35AM -0600, Greg Edwards wrote:
> Ok, I've managed to setup a self signed certificate.  Now when I deploy 
> this thing how long until RSA Data Security comes crashing down on me 
> for patent violations and what other options do I have.

I wouldn't worry about it.

SSL was patented by Netscape, who granted a free license to the entire
world.  That step was very important in promoting SSL as the standard
web security measure, ahead of the competing and now-forgotten "Secure
HTTP".  

SSL depends on the RSA cryptosystem, which was patented in the United
States (and only in the US) until September 2001.

> I want to be able to have external users access a few pages using a 
> secure server but I really don't have the $$$$$$ for some of these over 
> priced licenses.  I haven't looked at the current figures but when I did 
> about 2 yrs ago they were way out of my league :(

That's partly because two years ago, RSA was still a patented
technology.  

-- 
David Hayes
david at hayes-family.org