Re: Message Header: unprotected key

From: SM <sm_at_resistor.net>
Date: Thu, 07 Aug 2014 12:30:08 -0700

Hi Urban,
At 11:44 07-08-2014, Urban Loesch wrote:
>Today I installed opendkim v2.9.2 an now it shows me in the message
>header that my domain is not
>protected by DNSSEC.
>
>But this is not true. My domain is protected with DNSSEC.
>
>Here you can see the original message header now and before the upgrade:
>...
>DKIM-Filter: OpenDKIM Filter v2.9.2 mx3.domain.net 3hTdjL0l2fz1S4vq
>Authentication-Results: mx3.doamin.net; dkim=pass
> reason="1024-bit key; unprotected key"
> header.d=enas.net header.i=_at_enas.net header.b=TavwBdLt;
> dkim-adsp=pass; dkim-atps=neutral

The TXT RR in which you have the public key is not protected by DNSSEC.

Regards,
-sm
Received on Thu Aug 07 2014 - 19:31:38 PST