{"id":15315,"date":"2020-12-17T16:18:13","date_gmt":"2020-12-17T15:18:13","guid":{"rendered":"https:\/\/daniel.haxx.se\/blog\/?p=15315"},"modified":"2022-01-24T14:30:40","modified_gmt":"2022-01-24T13:30:40","slug":"curl-supports-nasa","status":"publish","type":"post","link":"https:\/\/daniel.haxx.se\/blog\/2020\/12\/17\/curl-supports-nasa\/","title":{"rendered":"curl supports NASA"},"content":{"rendered":"\n<p>Not everyone understands how open source is made. I received the following email from NASA a while ago.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Subject: Curl Country of Origin and NDAA Compliance<\/h2>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Hello, my name is [deleted] and I am a Supply Chain Risk Management Analyst at NASA. As such, I ensure that all NASA acquisitions of Covered Articles comply with Section 208 of the Further Consolidated Appropriations Act, 2020, Public Law 116-94, enacted December 20, 2019. To do so, the Country of Origin (CoO) information must be obtained from the company that develops, produces, manufactures, or assembles the product(s). To do so, please provide an email response or a formal document (a PDF on company letterhead is preferred, but a simple statement is sufficient) specifically identifying the country, or countries, in which Curl <strong>is developed and maintained<\/strong><\/p><\/blockquote>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>If the country of origin is outside the United States, please provide any information you may have stating that testing is performed in the United States prior to supplying products to customers. Additionally, if available, please identify all authorized resellers of the product in question.<\/p><\/blockquote>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Lastly, please confirm that Curl <strong>is not developed by, contain components developed by<\/strong>, or receive substantial influence from entities prohibited by Section 889 of the 2019 NDAA. These entities include the following companies and any of their subsidiaries or affiliates:<\/p><\/blockquote>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Hytera Communications Corporation<br>Huawei Technologies Company<br>ZTE Corporation<br>Dahua Technology Company<br>Hangzhou Hikvision Digital Technology Company<\/p><p>Finally, we have a time frame of 5 days for a response.<br>Thank you,<\/p><\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\">My answer<\/h2>\n\n\n\n<p>Okay, I first considered going with strong sarcasm in my reply due to the complete lack of understanding, and the implied threat in that last line. What would happen if I wouldn&#8217;t respond in time?<\/p>\n\n\n\n<p>Then it struck me that this could be my chance to once and for all get a confirmation if curl is already actually used in space or not. So I went with informative and a friendly tone.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Hi [name],<\/p><p>I will answer to these questions below to the best of my ability, and maybe you can answer something for me?<\/p><\/blockquote>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>curl (https:\/\/curl.se) is an open source project that creates two products, curl the command line tool and libcurl the library. I am the founder, lead developer and core maintainer of the project. To this date, I have done about 57% of the 26,000 changes in the source code repository. The remaining 43% have been done by 841 different volunteers and contributors from all over the world. Their names can be extracted from our git repository: https:\/\/github.com\/curl\/curl<\/p><\/blockquote>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>You can also see that I own most, but not all, copyrights in the project.<\/p><\/blockquote>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>I am a citizen of Sweden and I&#8217;ve been a citizen of Sweden during the entire time I&#8217;ve done all and any work on curl. The remaining 841 co-authors are from all over the world, but primarily from western European countries and the US. You could probably say that we live primarily &#8220;on the Internet&#8221; and not in any particular country.<\/p><\/blockquote>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>We don&#8217;t have resellers. I work for an American company (wolfSSL) where we do curl support for customers world-wide.<\/p><\/blockquote>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Our testing is done universally and is not bound to any specific country or region. We test our code substantially before release.<\/p><\/blockquote>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Me knowingly, we do not have any components or code authored by people at any of the mentioned companies.<\/p><\/blockquote>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>So finally my question: can you tell me anything about where or for what you use curl? Is it used in anything in space?<\/p><\/blockquote>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Regards,<br>Daniel<\/p><\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\">Used in space?<\/h2>\n\n\n\n<p>Of course my attempt was completely in vain and the answer back was very brief and it just said&#8230;<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/daniel.haxx.se\/blog\/wp-content\/uploads\/2020\/12\/NASA_logo.png\" alt=\"\" class=\"wp-image-15349\" width=\"399\" height=\"334\"\/><\/figure><\/div>\n\n\n\n<h5 class=\"wp-block-heading\">&#8220;We are using curl to support NASA&#8217;s mission and vision.&#8221;<\/h5>\n\n\n\n<h2 class=\"wp-block-heading\">Credits<\/h2>\n\n\n\n<p>Space ship image by <a href=\"https:\/\/pixabay.com\/users\/eliassch-3372715\/?utm_source=link-attribution&amp;utm_medium=referral&amp;utm_campaign=image&amp;utm_content=2057420\">Elias Sch.<\/a> from <a href=\"https:\/\/pixabay.com\/?utm_source=link-attribution&amp;utm_medium=referral&amp;utm_campaign=image&amp;utm_content=2057420\">Pixabay<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Not everyone understands how open source is made. I received the following email from NASA a while ago. Subject: Curl Country of Origin and NDAA Compliance Hello, my name is [deleted] and I am a Supply Chain Risk Management Analyst at NASA. As such, I ensure that all NASA acquisitions of Covered Articles comply with &hellip; <a href=\"https:\/\/daniel.haxx.se\/blog\/2020\/12\/17\/curl-supports-nasa\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">curl supports NASA<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":5,"featured_media":15430,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7,6],"tags":[33,507],"class_list":["post-15315","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-curl","category-floss","tag-curl-and-libcurl","tag-email"],"_links":{"self":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts\/15315","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/comments?post=15315"}],"version-history":[{"count":17,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts\/15315\/revisions"}],"predecessor-version":[{"id":15432,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts\/15315\/revisions\/15432"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/media\/15430"}],"wp:attachment":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/media?parent=15315"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/categories?post=15315"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/tags?post=15315"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}