Does using dropbox require encryption disclosure

Question

If I use the Dropbox API in my iOS app

• does this require me to declare at submission time that I have encryption in my App?
• If so is this a big amount of frak for a solo developer, legal & paperwork wise?

Answer 1

If you answer yes to the encryption question, the next question is whether you use it for anything other than authentication.

If you only use it for authentication you can answer no to this second question and that will be the end of it.

If you use encryption for encrypting other things in your app like data that will be transmitted over the network, then this you must declare and will require some more explicit documentation.

Answer 2

Consider, as well, export restrictions on cryptography.

Answer 3

According to http://stackoverflow.com/questions/2128927/, using SSL counts as "containing encryption". This interpretation is a dangerous one:

• A UIWebView "contains encryption".
• An app that stores anything in the keychain "contains encryption".
• An app that protects files by setting NSFileProtectionKey=NSFileProtectionComplete "contains encryption"
• Anything that uses IPsec "contains encryption".

There are loads of things in your app that might, at some level, involve encryption, and there are no warnings in the API docs. But Apple chose to use the wording "contains encryption", not "uses encryption".

Personally, as long as your code doesn't choose an algorithm/key size, it's not possible to precisely answer questions about the alogrithms it "contains" (which the forms ask you for), so a reasonable interpretation is that simply using HTTPS doesn't mean your app "contains encryption". But I'm not a lawyer.