Re: International PEM Participation

I seem to recall seeing something in Computerworld recently (written by John
Gilmore et al, I think) about the SPA reaching an agreement with the "northern
entity" regarding export of shrink-wrapped software which contained encryption
functionality.  I think there was some concern that the allowable key sizes
were rather small, as well.  Can someone (John??) fill us in on the details of
the agreement (what's covered, constraints on key size, etc.)?  Or is it
classified :-)
 
Regards,
Rich