Viktor Dukhovni <[email protected]> wrote: > On Mon, Dec 02, 2019 at 11:16:56AM +0100, Michael Grimm wrote:
Thanks for all your valuable information, I will follow your advices thoroughly ;-) One last question: >> #) Would it be wise to increase from 2048 to 4096 bits size? > > Definitely not, instead 1280 bits, but then migrate to P-256. I will migrate both KSK and ZSK to P-256. I understood that a ZSK should be of size 1280 bits, but what is the optimal size of a P-256 KSK [1]? Thanks and with kind regards, Michael [1] current rollover period is 10 years, which might be modified as well.
