I'll continue in the "not an expert" chain, but my understanding is that ITAR's prohibitions include communicating the information to a non-US person (a US person is a citizen or permanent resident), even if that is done on US soil.