DKIM key size selection in Virtualmin ?

Submitted by beat on Sat, 12/22/2012 - 07:54

(no urgency, reply can be next year :) )

Hi,

Where can we choose the DKIM key size in Virtualmin / Email Messages / DomainKeys Identified Mail ?

Virtualmin selects the minimum (1024 bits) required now by gmail and others, but opendkim's header added to incomming mails says:

Authentication-Results: mx0.example.com; dkim=pass (1024-bit key; insecure key)

Which is a bit overboard, but will become true soon. At least it doesn't give a good impression.

So should default DKIM key size be 2048 bits ? Would that have implications on DKIM DNS record size and email header size ? or even make emails incompatible with some hosts ?

Taking this opportunity to thank you all for this incredibly good software you are making here and for the stellar support given to your customers.

Wishing you all here Merry Christmas and a Happy, Healthy and wealthy new year, Beat

Status: 
Closed (fixed)

Comments

Submitted by JamieCameron on Sat, 12/22/2012 - 13:35

Thanks for pointing this out - I will increase the default key size to 2048 bits.

Google is now using a 2k bit key, so I assume that is supported by all clients and DNS servers.

Submitted by Issues on Sat, 01/05/2013 - 13:46

Automatically closed -- issue fixed for 2 weeks with no activity.