As far as I understand current interpretation, hosting a dowload of a piece of software that includes code capable of establishing a https connection (e.g. bundling a tls lib), on a US server, that can be dowloaded to a computer outside of the US, constitutes munitions export.