SSL encryption limitations?

Hi,

Is it true that it isn't allowed to use the tripple DES & MD5 encryption
scheme in SSL outside the USA?
I want to make an secure connection between an applet I wrote and an
webservice, but someone told me I could only use a 40 bit key algorithm
(which may be pretty insecure?) Could anyone clear things up for me?

Thanks in advance!

Matthijs

> Is it true that it isn't allowed to use the tripple DES & MD5 encryption
> scheme in SSL outside the USA?
> I want to make an secure connection between an applet I wrote and an
> webservice, but someone told me I could only use a 40 bit key algorithm
> (which may be pretty insecure?) Could anyone clear things up for me?
>

Used to be you couldn't export such encryption software without a
special license.  That has been lifted, but there are regulations
requiring notification, etc. for some classes of high encryption.  You
can read about the current U.S. laws here:

http://www.bxa.doc.gov/Encryption/regs.htm