Re: 4096 bit SSL keys

2016-09-04 Thread John Newman
> On Sep 3, 2016, at 8:29 PM, Riad S. Wahby wrote: > > John wrote: >> The reason I asked: updating a few certs at office recently I nuked >> an older F5 LTM device by installing a 4096 bit key/cert pair - the >> load on the appliance (Linux based) shot up from

Re: 4096 bit SSL keys

2016-09-03 Thread Georgi Guninski
On Sat, Sep 03, 2016 at 05:29:07PM -0700, Riad S. Wahby wrote: > John wrote: > > The reason I asked: updating a few certs at office recently I nuked > > an older F5 LTM device by installing a 4096 bit key/cert pair - the > > load on the appliance (Linux based) shot up from less

Re: 4096 bit SSL keys

2016-09-03 Thread Riad S. Wahby
John wrote: > The reason I asked: updating a few certs at office recently I nuked > an older F5 LTM device by installing a 4096 bit key/cert pair - the > load on the appliance (Linux based) shot up from less than 1 to about > 30 and became so excruciatingly slow it was nearly

4096 bit SSL keys

2016-09-03 Thread John
Speaking within the context of https SSL certs, is there any real value to a key/cert above 2048 bits? The reason I asked: updating a few certs at office recently I nuked an older F5 LTM device by installing a 4096 bit key/cert pair - the load on the appliance (Linux based) shot up from less