256bit ECC certificate by default?

[JimmyRittenborg]

In my opinion it should install a prime256v1 ecc certificate by default, for pure performance benefits - I'm just wondering if that's going to be the case? :)

This is a very important and great initiative by the way! Thanks 👍

[jdkasten]

Thanks Jimmy! I am also a fan of ECC and its benefits. We will have to do some research on the current library support and compatibility issues to determine whether we can make it the default, but we definitely want to support it. As we move closer to launch, we will make further policy decisions.

[JimmyRittenborg]

Sounds great! 😃

[JimmyRittenborg]

Has support for these more secure and way smaller Elliptic Curve certificates landed ? ❤️

[JimmyRittenborg]

Or does https://github.com/letsencrypt/letsencrypt/wiki/Ciphersuite-guidance really basically says it currently won't be supported due to lack of support in various UA's ? 😁

[JimmyRittenborg]

On the other hand, it looks like support for ECC certificates indeed is planed in 2016 😍
https://community.letsencrypt.org/t/elliptic-curve-cryptography-ecc-support/34

[hlx98007]

It is 2018 and LE has EC support, are there any plans for certbot to support EC certs?

[bmw]

@hlx98007 this is being tracked at #2163.

[hlx98007]

@bmw Thanks!