On Friday 01 October 2010, Daniel Kahn Gillmor wrote: > It would be a shame if squeeze shipped with this default set below > some common expectations of a key to last at least the lifetime of > a debian release.
1024 bits are more than enough to satisfy the security expectations of an auto-generated "snake-oil" key for the life time of squeeze. 512 bits were factored in 1999, 768 bits were factored in 2009. So, expect another 5-10 years for 1024. If an ssl-cert upload is necessary for squeeze for other reasons, I will change it. Otherwise it will have to wait for wheezy. -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
