mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-03 18:47:04 +09:00
RSA is slower and produces larger keys and certificates than ECDSA. P-256 provides equivalent security with smaller cert size and faster TLS handshakes, which matters for frequent cluster-internal reconnections. CA retains rotationPolicy: Never; leaf retains rotationPolicy: Always. Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Arsolitt <arsolitt@gmail.com>