> That's now been a stable recommendation for over 20 years, and there's not the slightest sign that 2048 bit can be broken any time soon. Except that now the

> That's now been a stable recommendation for over 20 years, and there's not the slightest sign that 2048 bit can be broken any time soon. Except that now the recommendation by NIST at least is to switch to 2048-bit by 2030 and then deprecate RSA altogether by 2035. But yeah, not being on at least 1024-bit RSA is weird and careless.