SSL 3.0 and TLS 1.0 did this (with a ServerKeyExchange message), with the limit being 512-bit for 40-bit export cipher suites and 1024-bit for the 56-bit export cipher suites. This is another reason why it is unfortunate that the 56-bit export cipher suites was disabled in OpenSSL in 2006.