Are there any disadvantages to using a 4096-bit encrypted SSL certificate?

前端 未结 4 862
生来不讨喜
生来不讨喜 2020-12-13 03:31

I was recently requesting a SSL cert via GoDaddy and noticed this message:

\"Make

4条回答
  •  天命终不由人
    2020-12-13 04:20

    If you have a 4096 bit SSL certificate, in order to support some clients (especially Java-based clients and some older clients) you will want to generate a 2048 bit or 1024 bit Diffie-Hellman Key and add it to your server certificate. However, if you support a 1024 bit DH key you should also be aware of the Logjam attack. You can accommodate these clients easily by adding a DH key of the appropriate size, but first carefully consider which clients you want to support.

提交回复
热议问题