I wonder if app SSL best practices is hindered by Apple's requirements to self-declare crypto and get export permissions from the US department of whatever. It'

I wonder if app SSL best practices is hindered by Apple's requirements to self-declare crypto and get export permissions from the US department of whatever. It's quite the surprise speedbump for new app developers, being first presented with this form at the point of app store upload. I can easily imagine developers doing a search&replace of "https" to "http" just to avoid dealing with all that.