> On Apr 24, 2017, at 10:20 AM, Michael Segel <dovecot_...@hotmail.com> wrote: > > (Of course the cert is 8192 which may be a bit excessive over 2048)
Don't be a crypto fashionista. Generate a 2048-bit key and obtain and deploy a corresponding 2048-bit certificate. -- Viktor.