[gruez]

So we should continue using ECB and RSA < 2048?

[y-curious]

Not if you want to get FedRAMP designation at any point.

[archgoon]

Ah, but that's a beauty of it. If you encrypt with ECB you can't be decrypted by a federally compliant organization!

[kurikuri]

Unfortunately, a federally compliant organization could still decrypt it because ECB decryption is still allowed for legacy use.