Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Port25-Admin1]

http://blog.returnpath.com/blog/ken-takahashi/google-is-failing-your-perfectly-good-dkim-key-and-why-thats-a-good-thing

In short, Google will start failing DKIM if the key is less than 512-bits.  Within a few weeks, they will fail keys of less than 1024-bits. They have taken this action in response to a Wired.com article regarding a security vulnerability (http://www.wired.com/threatlevel/2012/10/dkim-vulnerability-widespread/all/).

[aditoal]

Were just in the process of providing a facility for our users to select their key strength so they can time their changes with their DNS updates.

The only question as it's a real unknown is the performance overhead in going from 768 to 1024 and 2048. Hopefully this is going to be minimal - any insights?

[Port25-Admin1]

Yes, PowerMTA supports keys larger than 1024.  The impact is really just relative to the situation; based on message size, key size, speed and # of CPUs, and amount of headroom in your CPUs.