It's not illegal to support SSL, it's illegal to _export_ SSL. The way the US government looks at it is, what's to say that terrorists aren't going to d/l mIRC and use it to have encrypted communications?