Slashdot Mirror
Microsoft: As of October, 1024-Bit Certs Are the New Minimum
way2trivial writes with this snippet from Information Week about a warning from Microsoft reminding Windows administrators that an update scheduled for October 9th will require a higher standard for digital certificates. "That warning comes as Microsoft prepares to release an automatic security update for Windows on Oct. 9, 2012, that will make longer key lengths mandatory for all digital certificates that touch Windows systems. ... Internet Explorer won't be able to access any website secured using an RSA digital certificate with a key length of less than 1,024 bits. ActiveX controls might be blocked, users might not be able to install applications, and Outlook 2010 won't be able to encrypt or digitally sign emails, or communicate with an Exchange server for SSL/TLS communications."
I'm thinking that they stuck with 1024 because
They stuck with 1024 because they want to pretend to be secure without actually having to be secure. A ton of money is made by the PC "security" industry surrounding Windows. Can't do anything that might jeopardize the legion of people who refuse to recommend anything else lest it put them out of a job.