at least 2048 bits yeah, I added that .. 2048 is really minimum best practice these days ;) SSH1, not SHA1! Good point, edited - btw next paragraph also says

at least 2048 bits yeah, I added that .. 2048 is really minimum best practice these days ;) SSH1, not SHA1! Good point, edited - btw next paragraph also says disabling 1024 bit diffie-hellman-group1-sha1 key exchange.