[Dovecot] dovecot-openssl.cnf - switch to 2048 bits?

[A M]

Hello,

Just had a query, from security point of view.


Shouldn't dovecot-openssl.conf defaults now be 2048 bits?

i.e. default_bits = 1024

I have read that 1024 bit certificates are now deprecated,
since Dec 31, 2013.


So may be we should have default as 2048 and can be changed
manually if someone specifically wants 1024 or lower.

Regards,


A M