Re: CSR request, encryption level choice

Thanks Aaron, that's what I figured and went ahead and submitted the 2048.
Appreciate the feedback.
Regards,
Joe W Holt - Sr Programmer/Architect
Jack Onofrio Dog Shows, LLC
405.427.8181





----- Original message -----
From: Aaron Bartell <aaronbartell@xxxxxxxxx>
Sent by: "WEB400" <web400-bounces@xxxxxxxxxxxx>
To: "Web Enabling the IBM i (AS/400 and iSeries)" <web400@xxxxxxxxxxxx>
Cc:
Subject: Re: [WEB400] CSR request, encryption level choice
Date: Mon, Jan 11, 2016 12:57 PM

I am paraphrasing from what I believe was stated by Larry Bolhuis on
Midrange-L. In short, 2048 is sufficient and 4096 will consume (a lot?)
more CPU to do the encryption/decryption. He recommended going with
2048
and that's what I've done this past year.

Aaron Bartell
litmis.com - Services for open source on IBM i

On Mon, Jan 11, 2016 at 11:15 AM, Joe W Holt <joe.holt@xxxxxxxxxxx>
wrote:

>
>
> Hey everyone, time to renew our cert. Notice that 4096 encryption
level is
> available on 7.1. With all the issues with encryption the last couple
years
> should I go ahead and renew with the higher level or stick with 2048?
> Research tells me most browsers support the higher level now but the
impact
> on the server to do the handshake is supposed to be 8 to 10 times
larger.
> Is the standard acceptance still at 2048? Any feedback appreciated.
>
>
>
> ***
> Regards,
> Joe W Holt
> Sr Programmer/Developer
> Jack Onofrio Dog Shows, LLC
> 405.427.8181
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
mailing
> list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: [1]http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at [2]http://archive.midrange.com/web400.
>
>
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: [3]http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at [4]http://archive.midrange.com/web400.




References

Visible links
1. http://lists.midrange.com/mailman/listinfo/web400
2. http://archive.midrange.com/web400
3. http://lists.midrange.com/mailman/listinfo/web400
4. http://archive.midrange.com/web400