France had a similar policy in the mid 90s. I recall SSL had a renegotiation to allow banking sites to upgrade from the weak key to a stronger one. Over time,

France had a similar policy in the mid 90s. I recall SSL had a renegotiation to allow banking sites to upgrade from the weak key to a stronger one. Over time, this policy went away. There are companies that do disallow ssh or require you use a null cipher/key to a gateway before going to the outside world. I'm not sure how this will be enforced, however from prior comments, it looks like it may be an old policy?