ITAR?

I was under the impression the crypto export ban was done away with some time ago. Am I wrong? Though if systems were initially set up with weak encryption because of this, it wouldn't surprise me if they're still stuck that way for compatibility reasons.