ATTENTION server admins: #letsencrypt defaults to RSA signatures, which are vulnerable

https://www.thesslstore.com/blog/is-it-still-safe-to-use-rsa-encryption/

I you upgrade your Fedora crypto policy, you'll see that:

```
sudo update-crypto-policies --set FUTURE
curl https://foo.bar/
curl: (60) SSL certificate problem: EE certificate key too weak
```

This guide shows how to set up ecdsa encryption:

https://eff-certbot.readthedocs.io/en/stable/using.html#using-ecdsa-keys