Although most of us have a European background and a general problem to understand US Export Restictions, the Apache Software Foundation is bound by them.
I think it is exclusively encryption that affects us, and today I noticed that we have Bouncy Castle dependencies, and even though this is indirectly (Jetty and Shiro), we need to register, IIUIC. See https://www.apache.org/licenses/exports/ and https://www.apache.org/dev/crypto.html I will try to get this organized as soon as possible. Cheers -- Niclas Hedhman, Software Developer http://polygene.apache.org - New Energy for Java