"In some countries it may be illegal to use any encryption at all without a special permit."
That warning was added to the description for a reason.
As for hosting, there was a huge issue originally with the export of cryptographic software, which led to the creation of Debian's "non-us" archive of software that had to be hosted outside the US. That got solved once it was possible to distribute such software with a notification requirement. See https://lists.debian.org/debian-devel-announce/2002/03/msg00... for the long and storied history.
From the Debian package description for openssh-client, at http://packages.debian.org/sid/openssh-client :
"In some countries it may be illegal to use any encryption at all without a special permit."
That warning was added to the description for a reason.
As for hosting, there was a huge issue originally with the export of cryptographic software, which led to the creation of Debian's "non-us" archive of software that had to be hosted outside the US. That got solved once it was possible to distribute such software with a notification requirement. See https://lists.debian.org/debian-devel-announce/2002/03/msg00... for the long and storied history.