Two questions:
Why move to 2048-bit when the NSA itself recommends 3072-bit? Why no effort to stop reusing primes so much, since that's apparently part of the attack? I get that increasing the length is probably easier, but wouldn't it be sensible to do both?