Recherches récentes
Options de recherche
Totally missed that information : a new #KSK for the root zone was generated during Root KSK Ceremony 49 last April. It's still a RSA 2048-bits key and it's keytag is 46211 if I read the log correctly
KSK Rollover incoming ! (in 2-3 years ^^)
www.iana.orgRoot KSK Ceremony 49
@shaft RSA 2048-bits seems a bit strange, is there a reason they're not switching to RSA 4096-bits or a better algorithm?
@lanodan @shaft This thread might be of interest to you: https://mailarchive.ietf.org/arch/msg/dnsop/3hzGyV9LGnUpw0ncFudWdQ2sZvc/ My understanding of the current trends and global points of view is that after RSA 2048 it is better to focus energy on switching to elliptic curves based algorithms and just shield away from RSA completely. For both reasons on size consequences of what is exchanged as DNS packets, and for fears of strength against quantum computing.
mailarchive.ietf.org[DNSOP] Whiskey Tango Foxtrot on key lengths...Search IETF mail list archives