CloudFront 支援 4096-bit RSA 的 SSL/TLS certificate 了
source link: https://blog.gslin.org/archives/2023/12/24/11550/cloudfront-%e6%94%af%e6%8f%b4-4096-bit-rsa-%e7%9a%84-ssl-tls-certificate-%e4%ba%86/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
CloudFront 支援 4096-bit RSA 的 SSL/TLS certificate 了
CloudFront 總算支援 4096-bit 的 RSA SSL/TLS certificate 了：「Amazon CloudFront now supports 4096-bit RSA TLS certificates」。
翻了一下 AWS ACM，看起來是 2020 年以前就支援 4096-bit RSA SSL/TLS certificate 了，CloudFront 晚蠻多的...
另外查了一下目前的強度，NSA 給出 2048-bit RSA 對到 112-bit strength，而 3072-bit RSA 對到 128-bit strength；至於 4096-bit RSA，目前是估算大約在 140-bit strength，有點微妙的數字。
看起來主要應該是給 compliance 需求使用的，有些舊的 library 未必支援 ECC 類的演算法，還是得透過拉高 RSA key size 來增加安全性。
Related
CloudFront 支援 3072 bit RSA 憑證
看到 CloudFront 支援 3072 bit RSA certificate 的消息：「Amazon CloudFront announces support for 3072-bit RSA certificates」。 2048 bit 在一般情況算是夠用，畢竟現在的紀錄也才到 829 bit (參考「RSA Factoring Challenge」)： 1024-bit RSA keys are equivalent in strength to 80-bit symmetric keys, 2048-bit RSA keys to 112-bit symmetric keys, 3072-bit RSA keys to 128-bit symmetric keys, and 15360-bit…
July 21, 2023In "AWS"
Amazon RDS 的 TLS 連線所使用的 CA 要更新了
Amazon RDS 的 TLS (SSL) 連線所使用的 CA 要更新了：「Rotate Your SSL/TLS Certificates Now – Amazon RDS and Amazon Aurora Expire in 2024」。 如果沒有開 TLS 連線的話是不受影響 (像是內網裸奔)，但如果有在用 TLS 的話就要注意一下了，看起來得手動更新處理。 比較特別的是新的 CA 簽的超長： Most SSL/TLS certificates (rds-ca-2019) for your DB instances will expire in 2024 after the certificate update in 2020. In December…
October 25, 2023In "AWS"
CloudFront 宣佈支援 ECDSA 的 Certificate
Amazon CloudFront 宣佈支援 ECDSA 的 certificate：「Amazon CloudFront now supports ECDSA certificates for HTTPS connections to viewers」。 用主要是讓 certificate 更小，讓 HTTPS 建立時的過程更快 (包括了傳輸的速度與計算的速度)： As a result, conducting TLS handshakes with ECDSA certificates requires less networking and computing resources making them a good option for IoT devices that have limited storage and…
July 16, 2021In "AWS"
Leave a Reply
Your email address will not be published. Required fields are marked *
Comment *
Name *
Email *
Website
Notify me of follow-up comments by email.
Notify me of new posts by email.
To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Learn More)
Post navigation
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK