There are many limits on key size. As far as I know 56 bit in USA and 40 bits in India without license. On the other hand much higher 128 bit or 1024 or 4096 bit for banking and other purposes. So what will one do (I am not starting any banking business or something, just asking in case a man wants to make a secure app must he take license?) Without license one cannot comply with both.

Secondly I am new to TLS and cryptography in general. In case of https connection who decides the encryption strength the server or client. How can I force a less than 32-bit encryption on server and clientside. If the data is read then it's not a problem but want to prevent man in the middle attacks.