Message Header: unprotected key

From: Urban Loesch <bind_at_enas.net>
Date: Thu, 07 Aug 2014 20:44:56 +0200

Hi,

I'm new on the list.
Today I installed opendkim v2.9.2 an now it shows me in the message header that my domain is not
protected by DNSSEC.

But this is not true. My domain is protected with DNSSEC.

Here you can see the original message header now and before the upgrade:
...
DKIM-Filter: OpenDKIM Filter v2.9.2 mx3.domain.net 3hTdjL0l2fz1S4vq
Authentication-Results: mx3.doamin.net; dkim=pass
        reason="1024-bit key; unprotected key"
        header.d=enas.net header.i=_at_enas.net header.b=TavwBdLt;
        dkim-adsp=pass; dkim-atps=neutral
...


Before the upgrade to 2.9.2:
...
X-DKIM: OpenDKIM Filter v2.6.8 mx3.domain.net 3hMH794hvfz1S4t9
Authentication-Results: mx3.domain.net; dkim=pass
        reason="1024-bit key; secure key"
        header.d=enas.net header.i=_at_enas.net header.b=Y8wr/q1i;
        dkim-adsp=pass; dkim-atps=neutral
...

Are there some changes between 2.6.x and 2.9.x regarding DNSSEC?

Many thanks
Urban Loesch
Received on Thu Aug 07 2014 - 18:45:05 PST