mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-04 11:07:03 +09:00
RSA keys are unnecessarily large for internal PKI. ECDSA P-256 provides equivalent security with smaller key material, faster TLS handshakes, and smaller certificates — beneficial for high-frequency p2p connections. CA retains rotationPolicy: Never (root CA stability). Leaf uses rotationPolicy: Always (new key on every renewal). Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Arsolitt <arsolitt@gmail.com>