Linter: gosec, Rule: G403 - Ensure minimum RSA key length of 2048 bits. Should we enable it?

[zak-pawel]

Use Case

This issue starts discussion about enabling:

• linter: gosec - Inspects source code for security problems by scanning the Go AST.
• rule: G403 - Ensure minimum RSA key length of 2048 bits

Rule is mapped to CWE CATEGORY: Cryptographic Issues.

Expected behavior

Decision if rule should be enabled or not.

Actual behavior

For this rule no findings were found in current code.

Additional info

For this rule no additional configuration can be provided.

[powersj]

+1

[srebhan]

Even though I cannot imagine where this applies (because I think we don't generate RSA keys ourselves) I think it might become aware of those spots for future PRs.