mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-05 11:37:31 +09:00
RSA is slower and produces larger keys and certificates than ECDSA. P-256 provides equivalent security with smaller cert size and faster TLS handshakes, which matters for frequent cluster-internal reconnections. CA retains rotationPolicy: Never; leaf retains rotationPolicy: Always. Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Arsolitt <arsolitt@gmail.com>