From owner-freebsd-questions Fri Mar 1 12:45:39 2002 Delivered-To: freebsd-questions@freebsd.org Received: from out4.mx.nwbl.wi.voyager.net (out4.mx.nwbl.wi.voyager.net [169.207.1.77]) by hub.freebsd.org (Postfix) with ESMTP id 25B9837B417 for ; Fri, 1 Mar 2002 12:45:37 -0800 (PST) Received: from shell.core.com (shell.core.com [169.207.1.89]) by out4.mx.nwbl.wi.voyager.net (8.11.1/8.11.4/1.7) with ESMTP id g21KjZ519421 for ; Fri, 1 Mar 2002 14:45:35 -0600 (CST) Received: from localhost (raiden@localhost) by shell.core.com (8.11.6/8.11.6/1.3) with ESMTP id g21KjZW17240 for ; Fri, 1 Mar 2002 14:45:35 -0600 (CST) Date: Fri, 1 Mar 2002 14:45:35 -0600 (CST) From: Steven Lake X-X-Sender: raiden@shell.core.com To: freebsd-questions@FreeBSD.ORG Subject: rotating keys Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Simple question for curiousities sake. How often should you rotate your DSA keys? I've got a server that's running with a special DSA key complete with password, but the key is closing on a year old. How often should I generate a new key for it? I'm assuming a year is too long, so I'm just curious. I'm wanting to rotate it more often, but I'm looking for a suggestion of the recommended time limit to keep the current DSA key, then rotate to a new one. I'm looking at starting to do this on a more regular basis based on scheduled server maintenance and such. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message