[Operators] Diffie-Hellman: 2k or 4k keys?

[Luis G.F]

A year ago i open a bug with tigase. The problem is that until java >=
1.8 DH-params greater than 2048 make connections with java-thins
impossible. 

El 2015-11-25 10:26, Mathias Ertl escribió: 

> Hi Arsimael,
> 
> On Wed, Nov 25, 2015 at 12:09:00AM +0100, Arsimael Inshan wrote: 
> 
>> When I created the DH Keys on my server, I generated 2k and 4k keys.
>> I was told the 4k keys shouldn't be used (yet) because of
>> incompartibillities and they wouldn't increase the security this
>> much, but generate way more problems.
>> 
>> Is this still the state of the art? Shall I stick with 2k or is it
>> recommendet to switch to 4K Keys?
> 
> We used 4K keys for many months and I haven't received any reports of
> problems related to that.
> 
> greetings, Mati
> (jabber.at)
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.jabber.org/pipermail/operators/attachments/20151125/5ea1d127/attachment.html>