2048 or 4096 for new keys? aka defaults vs. Debian

[Paul R. Ramer]

Sylvain <beuc at beuc.net> wrote:
>Hi,
>
>I saw a lot of activity in the Debian project about upgrading to a
>4096 RSA key,
>e.g.
>http://lists.debian.org/debian-devel-announce/2010/09/msg00003.html
>
>However GnuPG's default is 2048.
>
>Is this zealotry on the Debian front, or something to update in gnupg?

Hi,

If someone or a group is considering a change to a larger key such as a 4096 bit key, it is a personal choice.  It does not mean that the defaults are not sensible. There have been several discussions about using 4096 bits instead of 2048 bit keys over the years. Reading those threads may help.

HTH.

Cheers,

--Paul
--
PGP: 3DB6D884