Re: It's Not All Good
These restrictions were a paper law that only affected US citizens and companies. Even browsers of the day would accept stronger certs in "international" versions of their products. So it wouldn't have impacted some Russian ransomware gang who could have happily used any length key or algorithm they felt like.