TLS certificate: rsa4096 --> ECDSAWithSHA512 384bit secp384r1

elliptic curves in ECDHE handshake: only CurveP384 + CurveP521, default CurveP256 removed
RebuildInterval: 24h --> 72h
certificate valid: 2y --> 5y
throttled.PerDay(4) --> PerHour(4), to enable limited testing

reseed/service.go

@@ -54,7 +54,8 @@ func NewReseeder(netdb NetDbProvider) *ReseederImpl {
 		netdb:           netdb,
 		su3s:            make(chan [][]byte),
 		NumRi:           75,
-		RebuildInterval: 24 * time.Hour,
+//		RebuildInterval: 24 * time.Hour,
+		RebuildInterval: 72 * time.Hour,
 	}
 }