SSL (Secure Socket Layer) data transit necessitates encryption, and many countries limit encryption technology import, export, and use. If SSL was incorporated in Apache’s base package, it would raise a slew of legal and regulatory difficulties, and it would no longer be freely available. Furthermore, part of the technology necessary to communicate with current customers over SSL is trademarked by RSA Data Security, which prohibits its usage without a licence.