Is the Patriot act causing a similar problem to the old law of US companies not being able to sell certificates higher than 40bits. One in which non-US companies have an advantage - like Thawte which was producing > 40bit keys for international sale when the US could not? Will web 3.0 consist of apps running as hosted services like salesforce.com or will companies insist on servers hosted internally like the Google search appliance.

http://tech.slashdot.org/tech/08/03/24/1959201.shtml

"The issue here is not with users voluntarily using Google services (search, gmail, etc.). Rather it is with companies who want to outsource their data needs to Google. In addition to the visible public products that Google has, it also offers corporate solutions: for instance if a company wants to outsource their email system, or have Google run search and collaborative software for use inside the company."

"Google is trying hard to make these new kinds of products work. But unfortunately U.S. laws mean that any data that ends up on Google servers can be snooped by U.S. authorities. Many companies don't like the idea that the U.S. government will have such broad access to their data. In many countries where strong privacy laws exist (Canada, U.K., etc.), allowing the data to be managed by a U.S. company would then actually be illegal--since the company couldn't guarantee integrity or privacy of the data."

"The end result of this is that Google is at disadvantage in the global marketplace because of the over-reaching U.S. laws. Google isn't the only one, of course: I'm sure U.S. companies have been losing lots of contracts because international businesses are wary of storing or moving data through U.S. systems since it is now well-known that such systems are not immune to U.S. government monitoring or interference."