3 ms·
It is even weaker than that. DKIM keys themselves can be stolen - most servers don’t store them in HSMs (and HSMs are also not infallible). Or factored - Debia
by beagle3 6y ago
It is even weaker than that. DKIM keys themselves can be stolen - most servers don’t store them in HSMs (and HSMs are also not infallible).
Or factored - Debian had a bug 12 years ago that caused weak SSH keys, a similar thing could happen to DKIM key generation (or has happened, but not yet discovered).
Some study showed many RSA keys in the wild had a common factor. A weakness of this family might be discovered with DKIM keys.
It is supporting circumstantial evidence, not proof of identity.
- Natanael_L 6y agoMany DKIM keys uses outdated key generation defaults with 512 bit RSA keys. Google used to have such weak DKIM keys too in ~2012.