The RSA key is shorter than 1024 bits.

DKIM_WEAK_KEY · Severity: Warning

• WarningDKIM_WEAK_KEY

  The RSA key is shorter than 1024 bits.

  RFC 8301 says verifiers must not accept RSA keys shorter than 1024 bits.

  Recommendation: Rotate to a key of at least 2048 bits.

Reported by

• Mail configuration check
• DKIM record check

Available through the API

• Mail configuration check API
• Bulk mail configuration check API
• DKIM record check API

Related findings

• Error DKIM_INVALID_KEY The DKIM public key is not valid base64.
• Warning DKIM_KEY_REVOKED The DKIM key for this selector is revoked (empty p tag).
• Error DKIM_MULTIPLE_RECORDS More than one DKIM record was found for the selector.
• Warning DKIM_NOT_FOUND No DKIM key was found for the given selector.
• Error DKIM_SYNTAX_ERROR The DKIM record contains a tag that cannot be parsed or has an invalid value.
• Info DKIM_TESTING_MODE The DKIM record is in testing mode (t=y).

All findings