Update on stats 2019-11

Michael Grimm trashcan at ellael.org
Mon Dec 2 20:14:30 CET 2019


Viktor Dukhovni <ietf-dane at dukhovni.org> wrote:
> On Mon, Dec 02, 2019 at 11:16:56AM +0100, Michael Grimm wrote:

Thanks for all your valuable information, I will follow your advices thoroughly ;-)

One last question:

>> #) Would it be wise to increase from 2048 to 4096 bits size?
> 
> Definitely not, instead 1280 bits, but then migrate to P-256.

I will migrate both KSK and ZSK to P-256. I understood that a ZSK should be of size 1280 bits, but what is the optimal size of a P-256 KSK [1]?

Thanks and with kind regards,
Michael

[1] current rollover period is 10 years, which might be modified as well.



More information about the dane-users mailing list