Sunday, September 16, 2012  Do Your SSL Certs Meet Microsoft's
New Requirements?  This means that Internet Explorer will refuse
to access websites that do not have RSA keys with minimum
lengths of 1024 bits. You won't be able to exchange encrypted
emails, run ActiveX controls or install applications on Windows.
This isn't new, as Microsoft started making announcements about
this well over a year ago. If your first reaction is "There goes
Redmond bossing the rest of the world around again!", think
about it. 1024-bits key length is already considered obsolete,
so if you're hanging on to 1024-bit keys or weaker you're asking
for trouble. The National Institute of Standards and Technology
bulletin 800-57 recommends RSA key lengths of 2048 or 3072 bits.
NIST calculates that 2048-bit keys will be good until 2030, and
then they'll be easily breakable by brute force. 3072-bit keys
have predicted lifetimes of "much longer." So 4096-bit RSA keys
have lifetimes of "much, much longer."  Now What?  If you're
running some