The RSA key is shorter than 1024 bits.

DKIM_WEAK_KEY · Severity: Warning

• WarningDKIM_WEAK_KEY

  The RSA key is shorter than 1024 bits.

  RFC 8301 says verifiers must not accept RSA keys shorter than 1024 bits.

  Recommendation: Rotate to a key of at least 2048 bits.

Reported by

• Domain health check
• Mail configuration check
• DKIM record check
• DKIM selector finder

Available through the API

• Domain health check API
• Mail configuration check API
• Bulk mail configuration check API
• DKIM record check API
• DKIM selector finder API

Related findings

• Error DKIM_INVALID_KEY The DKIM public key is not valid base64.
• Warning DKIM_KEY_REVOKED The DKIM key for this selector is revoked (empty p tag).
• Error DKIM_MULTIPLE_RECORDS More than one DKIM record was found for the selector.
• Warning DKIM_NOT_FOUND No DKIM key was found for the given selector.
• Info DKIM_NO_COMMON_SELECTORS No DKIM key was found under the common selectors that were tried.
• Error DKIM_SYNTAX_ERROR The DKIM record contains a tag that cannot be parsed or has an invalid value.

All findings