[Operators] Diffie-Hellman: 2k or 4k keys?

[Mathias Ertl]

Hi Arsimael,

On Wed, Nov 25, 2015 at 12:09:00AM +0100, Arsimael Inshan wrote:
> When I created the DH Keys on my server, I generated 2k and 4k keys.
> I was told the 4k keys shouldn't be used (yet) because of
> incompartibillities and they wouldn't increase the security this
> much, but generate way more problems.
> 
> Is this still the state of the art? Shall I stick with 2k or is it
> recommendet to switch to 4K Keys?

We used 4K keys for many months and I haven't received any reports of
problems related to that.

greetings, Mati
(jabber.at)


-- 
I only read plain text mail! I prefer pgp|gpg signed & encrypted mails!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://mail.jabber.org/pipermail/operators/attachments/20151125/9aa542bb/attachment.sig>