Show HN: TinyCert – Certificates as a service

Re:Show HN: TinyCert – Certificates as a service by mappu on Saturday September 13, 2014 @11:28PM (#8314434)

> The generated keypairs are 1024-bit RSA public and private keys ... This is sufficiently strong for use on the web in the present day

1024-bit RSA certificates are considered deprecated, no longer issued, and if they don't already throw browser warnings then they will soon.

[ Parent | on HN ]

Re:Show HN: TinyCert – Certificates as a service by iancarroll on Sunday September 14, 2014 @12:59AM (#8314559)

Indeed, this should be changed. The root is 2048 bits, but it's still unacceptable to issue 1024-bit certificates.

[ Parent | on HN ]

Re:Show HN: TinyCert – Certificates as a service by shdon on Sunday September 14, 2014 @06:10AM (#8314911)

I will indeed update this. It is still a work in progress.

[ Parent | on HN ]

Re:Show HN: TinyCert – Certificates as a service by shdon on Sunday September 14, 2014 @11:27AM (#8315372)

And now it has been updated. Any new CSRs generated will be 2048-bit.

[ Parent | on HN ]

Re:Show HN: TinyCert – Certificates as a service by cmdrfred on Sunday September 14, 2014 @12:25PM (#8315520)

What a quick fix, I'll bookmark this and watch what it becomes.

[ Parent | on HN ]