Live data from Hacker News

HashiCorp forbids its software being used in China

hashicorp.com

11–20 of 30 posts

Re: HashiCorp forbids its software being used in China

#11

Hello, I'm a founder of HashiCorp and I'd like to explain this. First, this document only applies to enterprise evaluation software. This doesn't apply to our OSS software and this shouldn't be linked anywhere near our OSS except in the context of signing up for an enterprise eval. Most importantly: why is this here? This is NOT a political statement. This is a legal requirement. The encryption we use in Vault is sub…

It's interesting to me that it's Chinese export control laws that affect you. Normally when you hear about this kind of thing, it's the US export restrictions causing the issue. Does that not apply in this case? And wouldn't you be importing into China? (IANAL, genuinely asking)

Re: HashiCorp forbids its software being used in China

#13

Hello, I'm a founder of HashiCorp and I'd like to explain this. First, this document only applies to enterprise evaluation software. This doesn't apply to our OSS software and this shouldn't be linked anywhere near our OSS except in the context of signing up for an enterprise eval. Most importantly: why is this here? This is NOT a political statement. This is a legal requirement. The encryption we use in Vault is sub…

That's clear now. Maybe add this explanation somewhere and link to it from your terms-of-evaluation.

Re: HashiCorp forbids its software being used in China

#16

Hello, I'm a founder of HashiCorp and I'd like to explain this. First, this document only applies to enterprise evaluation software. This doesn't apply to our OSS software and this shouldn't be linked anywhere near our OSS except in the context of signing up for an enterprise eval. Most importantly: why is this here? This is NOT a political statement. This is a legal requirement. The encryption we use in Vault is sub…

It's interesting to me that it's Chinese export control laws that affect you. Normally when you hear about this kind of thing, it's the US export restrictions causing the issue. Does that not apply in this case? And wouldn't you be importing into China? (IANAL, genuinely asking)

Exactly, which is why OP's clarification is welcomed. I too made the same assumption as you did, or rather thought it was some political statement based on our current geopolitical climate.

But no, it's the Chinese looking to force a US company to use their pre-approved encryption for reasons that should be obvious.

Bravo.

Re: HashiCorp forbids its software being used in China

#17

Hello, I'm a founder of HashiCorp and I'd like to explain this. First, this document only applies to enterprise evaluation software. This doesn't apply to our OSS software and this shouldn't be linked anywhere near our OSS except in the context of signing up for an enterprise eval. Most importantly: why is this here? This is NOT a political statement. This is a legal requirement. The encryption we use in Vault is sub…

It's interesting to me that it's Chinese export control laws that affect you. Normally when you hear about this kind of thing, it's the US export restrictions causing the issue. Does that not apply in this case? And wouldn't you be importing into China? (IANAL, genuinely asking)

Perhaps they're referring to the Encryption Law https://www.cov.com/-/media/files/corporate/publications/201... in effect this year that discusses both the import and export of encryption.

Re: HashiCorp forbids its software being used in China

#18
post #9

Earlier quoted context omitted.

Or Taiwan!

Why would it include Taiwan? They are separate countries not separate "systems"

It says it only applies to the People's Republic of China, and in the notes above it's only because of the laws of the People's Republic of China.

In all practical senses Taiwan is a separate country, but there are reasons not to admit it: http://www.youtube.com/watch?v=4AivEQmfPpk&t=2m55s

Re: HashiCorp forbids its software being used in China

#19

Hello, I'm a founder of HashiCorp and I'd like to explain this. First, this document only applies to enterprise evaluation software. This doesn't apply to our OSS software and this shouldn't be linked anywhere near our OSS except in the context of signing up for an enterprise eval. Most importantly: why is this here? This is NOT a political statement. This is a legal requirement. The encryption we use in Vault is sub…

Thanks for clarifying. It sounded a lot like a political statement at first, but this makes more sense.

Re: HashiCorp forbids its software being used in China

#20

Hello, I'm a founder of HashiCorp and I'd like to explain this. First, this document only applies to enterprise evaluation software. This doesn't apply to our OSS software and this shouldn't be linked anywhere near our OSS except in the context of signing up for an enterprise eval. Most importantly: why is this here? This is NOT a political statement. This is a legal requirement. The encryption we use in Vault is sub…

It's interesting to me that it's Chinese export control laws that affect you. Normally when you hear about this kind of thing, it's the US export restrictions causing the issue. Does that not apply in this case? And wouldn't you be importing into China? (IANAL, genuinely asking)

It's not export controls in the case of China afaik. It's literally 'the party would like to read your data in the name of social harmony'
Post reply on HN