2 Dec
2019
2 Dec
'19
8:14 p.m.
Viktor Dukhovni ietf-dane@dukhovni.org wrote:
On Mon, Dec 02, 2019 at 11:16:56AM +0100, Michael Grimm wrote:
Thanks for all your valuable information, I will follow your advices thoroughly ;-)
One last question:
#) Would it be wise to increase from 2048 to 4096 bits size?
Definitely not, instead 1280 bits, but then migrate to P-256.
I will migrate both KSK and ZSK to P-256. I understood that a ZSK should be of size 1280 bits, but what is the optimal size of a P-256 KSK [1]?
Thanks and with kind regards, Michael
[1] current rollover period is 10 years, which might be modified as well.