mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-06 03:57:52 +09:00
RSA is slower and produces larger keys and certificates than ECDSA. P-256 provides equivalent security with smaller cert size and faster TLS handshakes, which matters for frequent cluster-internal reconnections. CA retains rotationPolicy: Never; leaf retains rotationPolicy: Always. Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Arsolitt <arsolitt@gmail.com>