[warmwaffles]

I'm interested on the PGP stuff with Zimmerman. If I encrypt a file using PGP and send it to a friend in Europe, would this act be in violation of ITAR or AECA?

If it is a violation, then how has HTTPS not been challenged?

[cdjk]

There's no problem sending encrypted data internationally. The "munition" is the code/program that does the encryption.

Export controls on crypto were relaxed in the late 90s (I'd have to look up the exact dates), and before then there were "export" versions of Netscape Navigator that only supported 40 bit keys.