DKIM finding
Weak DKIM key
The DKIM public key is shorter than 2048 bits. Major receivers downgrade trust in signatures made with weak keys.
Finding code
dkim_weak_key
This finding appears in the findings array of
the spam checker and
the POST /v1/sender API response when the
condition above is detected.
How to fix it
The fix.
Replace the key pair with RSA 2048-bit or stronger. Google and other major receivers downgrade or reject signatures made with 1024-bit keys.
Related DKIM findings
Other things we check.
| Finding | What it means |
|---|---|
dkim_missing
|
No DKIM signature |
dkim_signature_invalid
|
Invalid DKIM signature |
dkim_key_not_found
|
DKIM public key not found |
dkim_body_hash_mismatch
|
DKIM body hash mismatch |
dkim_alignment_fail
|
DKIM alignment failure |