I need some help for an evaluation in matters of security of the following situation.
The Connection is established with these Certificates:
1024 RSA with md5RSA (CA 4096 RSA with md5RSA)
4096 RSA with sha256RSA (CA 2048 RSA with sha1RSA)
Allowed Cipher Suites are:
I state that the
Client Certificate needs to be upgraded to improve the size for security. I recommended
4096 RSA to be future-proof for the next few years.
The respond I got state that there is no security risk with this constellation, because of the strong client CA cert and the strong server certificate.
And that the
1024 RSA certificate is only used for authentication, not for encryption.
Are these valid arguments? Any why?