As a non-American, how would they be able to enforce something like this? Is it related to the HTTP specification?

What stops me from encrypting things?