RSA key length support for generateCertificate #3057
Description
As shown by
https://wpt.fyi/results/webrtc/RTCPeerConnection-generateCertificate.html?label=experimental&label=master&aligned
all browsers support 1024 and 2048 bits (which is required).
Chrome supports up to 8192 bits (which take about 60 seconds to generate so WPT tests for that were too flaky). Firefox supports values above that even.
1024 bits RSA keys have been considered weak for a while now:
Can we agree that the minimum key length should be 2048? @alvestrand said 1024 is virtually unused in Chromium so can be safely removed.
Given that ECDSA has been the default in Chromium-based browsers (2016) it might be time to deprecate RSA alltogether.