Don't Use RSA

Interesting article on asymmetric cryptography...

Don't Use RSA

So, looks like I will be using Elliptic Curves with Curve 25519.   I'm not exactly sure how well TLS supports this.  I know that SSH does.  We micromanage the connections between the browser and t he server, and between servers, so likely they'll accommodate it.

That's why this whole subject is fraught.   I do hope I can get some real experts to look at all this while we're in the experimental stages.