Hacker News Reader

I'm trying to understand what it means - does it mean your code have to have a symbol called `_NSAKEY`? Or how does it affect compliance?

The entire signing system, of which these keys were part, was required to comply with US export controls.

In that case, why was it the backup key that was named after the NSA, and not the key that was actually used for this purpose in practice?

Have you never given your code variables tongue-in-cheek names?

Sure, but Microsoft didn't argue that it was tongue-in-cheek.

Occam's Glomar