Because if crypto export regulations actually were applied to SSL in practice, they'd have to prevent Apache and Firefox from getting into countries on the E:1

Because if crypto export regulations actually were applied to SSL in practice, they'd have to prevent Apache and Firefox from getting into countries on the E:1 list, and possibly D:1 as well. And personally, I don't know any https-supporting website owner who ever filled out the mother-may-I crypto form. (see http://www.gpo.gov/bis/ear/pdf/740spir.pdf http://www.gpo.gov/bis/ear/pdf/740spir.pdf)