Tweeted twitter.com/StackSecurity/status/678733667632611329
2 Fixed list & grammar
source | link

Is 8192 Diffie Hellman-Hellman overkill?

I've finally ran sslSSL server test on my server and was presented with:

This server supports weak Diffie-Hellman (DH) key exchange parameters. Grade capped to B.

So I tried to generate stronger using openssl dhparam 8196, but it didn't finished even after a day. So, two questions:

1) is it an overkill and is 4096 sufficient for now?

2) can I make openssl dhparam ran on multiple cores?

Thanks

  1. Is it an overkill and is 4096 sufficient for now?

  2. Can I make openssl dhparam run on multiple cores?

Is 8192 Diffie Hellman overkill?

I've finally ran ssl server test on my server and was presented with

This server supports weak Diffie-Hellman (DH) key exchange parameters. Grade capped to B.

So I tried to generate stronger using openssl dhparam 8196 but it didn't finished even after a day. So, two questions:

1) is it an overkill and is 4096 sufficient for now?

2) can I make openssl dhparam ran on multiple cores?

Thanks

Is 8192 Diffie-Hellman overkill?

I've finally ran SSL server test on my server and was presented with:

This server supports weak Diffie-Hellman (DH) key exchange parameters. Grade capped to B.

So I tried to generate stronger using openssl dhparam 8196, but it didn't finished even after a day. So, two questions:

  1. Is it an overkill and is 4096 sufficient for now?

  2. Can I make openssl dhparam run on multiple cores?

1
source | link

Is 8192 Diffie Hellman overkill?

I've finally ran ssl server test on my server and was presented with

This server supports weak Diffie-Hellman (DH) key exchange parameters. Grade capped to B.

So I tried to generate stronger using openssl dhparam 8196 but it didn't finished even after a day. So, two questions:

1) is it an overkill and is 4096 sufficient for now?

2) can I make openssl dhparam ran on multiple cores?

Thanks