The current  crypto-policies in Rawhide contain additional policy
named as NEXT. You can switch the system to it as root via command:
update-crypto-policies --set NEXT
The difference to the current DEFAULT policy is that TLS versions 1.0
and 1.1 are disabled and the minimum key length of RSA keys and minimum
length of DH parameters are 2048 bits.
There is also a FUTURE policy which in addition to this limits also the
symmetric crypto key length to minimum of 256 bits. However as this
policy is not really useful as it does not provide post-quantum safety
for asymmetric algorithms it might be eventually dropped (aliased to
the NEXT policy).
No matter how far down the wrong road you've gone, turn back.
[You'll know whether the road is wrong if you carefully listen to your
Show replies by date