Update on stats 2019-11
Michael Grimm
trashcan at ellael.org
Mon Dec 2 20:14:30 CET 2019
Viktor Dukhovni <ietf-dane at dukhovni.org> wrote:
> On Mon, Dec 02, 2019 at 11:16:56AM +0100, Michael Grimm wrote:
Thanks for all your valuable information, I will follow your advices thoroughly ;-)
One last question:
>> #) Would it be wise to increase from 2048 to 4096 bits size?
>
> Definitely not, instead 1280 bits, but then migrate to P-256.
I will migrate both KSK and ZSK to P-256. I understood that a ZSK should be of size 1280 bits, but what is the optimal size of a P-256 KSK [1]?
Thanks and with kind regards,
Michael
[1] current rollover period is 10 years, which might be modified as well.
More information about the dane-users
mailing list