> As one concrete example, Netscape's SSL implementation was originally shipped in two versions - the 'secure' US version, and a severely compromised internatio

> As one concrete example, Netscape's SSL implementation was originally shipped in two versions - the 'secure' US version, and a severely compromised international download version, due to export controls on the encryption method used. No need to bring Netscape from the past, Oracle's Java 8 ships with crippled crypto and you need to download additional jar from their site after accepting that you are not exporting it to "bad" countries [0]. What's funny is that the jar contains only configuration and it's super easy to adjust it manually. [0]: https://stackoverflow.com/questions/6481627/java-security-illegal-key-size-or-default-parameters https://stackoverflow.com/questions/6481627/java-security-il...