The ActiveX thing is sort of an interesting historical accident. As a Korean on this site you probably know the details much better, but for onlookers: Korea decided to develop, specify and make mandatory for ecommerce it's own 128-bit block cipher called SEED, back when the US had a crypto export embargo on crypto past 40bit (Europeans, too, will remember the International Editions of browsers like Netscape Navigator), which was deemed not good enough. This ended up being implemented and officially accredited as an ActiveX control, and for the longest time there was no framework in place to accredit other implementations. Mozilla actually implemented SEED in the hopes it might be helpful, but ended up dropping it again later. This situation remains unsolved until now, although every couple of months there's a news story of supposed gov plans to do to better soon.