I'm not sure what Sep 20 brings. One person told me he didn't believe all of
On september 20th the RSA patent should expire (assuming RSA does not try to renew it, hopefully not). You americans can then use a proper RSA implementation (like the rest of the world uses right now =).
BSAFE will be freed up then. Im also don't know if Mozilla will build to anything other than BSAFE. One person told me he has built using BSAFEeay, but that looks pretty shaky at this point. Even the libs I have for the older NSS don't look like they will seamlessly fit into the current code base. I can't go into details, but there is no one-to-one matching.
As far as RSA software packages/etc go you'll still need to buy those, but at least you can choose to go with the free implementations of RSA.
Steve
-Kurt