All Questions
2 questions
4
votes
1
answer
1k
views
What is a secure DNSKEY bit length and usage time?
During penetration testing I have seen DNSSEC keys with lengths of 1024 and 512 bits. NIST recommends a key length of at least 2048 bits. So is it correct to assume that these DNSKEY's are unsafe to ...
- 516
1
vote
2
answers
318
views
What are the implications of using an "unsafe" DNSSEC algorithm like RSA/MD5?
Why is it unsafe to use the DNSSEC algorithm RSA/MD5? In practical terms, how is DNSSEC weakened by the use of an algorithm such as MD5, which has a known weakness of collisions?
RFC 6944 states, ...
- 7,075