I'm creating an SSL cert for my IIS server and need to know when I should choose the
Microsoft RSA SChannel Cryptographic Provider or the
Microsoft DH SChannel Cryptographic Provider.
Question 1 Why would someone still need (what I assume is) a legacy certificate of 'DH'?
Given that the default is RSA/1024, I'm assuming that is the most secure choice, and the other one is for legacy reasons.
Question 2 Is there any guide to determine what bit level is appropriate for x device?
I'd be interested in either lab results, a math formula, or your personal experience. I know the different bit levels influence the time needed to secure an SSL session and that is important for low powered devices.
Question 3 How would bit-strength affect these scenarios?
My particular case involves these communication patterns:
A website that has powerful clients connecting and disconnecting the session frequently
A WCF website that sustains long durations of high IO data transfers
A client facing website geared for iPhones, and Desktops