I’ve installed a certificate for a Google App Engine project using Virtual IP (VIP) as explained here: https://developers.google.com/appengine/docs/ssl
The certificate will use 256-bit encryption if the server supports it, but is currently using 128-bit encryption. Is there anyway to get it to use 256-bit encryption instead? I have not been able to find anything about it in the documentation or anywhere else.
The word from the App Engine team:
“We only accept certificates with RSA keys with a minimum size of 1024 bits.
The certificate is only used verify identity, while the data
communications over the SSL channel are encrypted with the ‘best’
symmetric cipher commonly supported between the client and server.
Our servers support a whole bunch of symmetric ciphers, but we prefer
AES128 over AES256. If a client only supports AES256 then we’ll use
it.”