Enhance keylength of Domainkeys for more security

[AndreasY]

Hi,

I am just copy and pasting the info from the Parralels Plesk Panel 11.x for Linux as Linux seems to have been given this important feature while Windows users have been left out to dry.

http://forum.parallels.com/showthread.php?264562-Enhance-keylength-of-Domainkeys-for-more-security

Currently Plesk uses 768bit for sha-rsa private keys of created all Domainkey for signing.
You can check it:
root@server1234 ~ # openssl rsa -in /etc/domainkey/example.org/default -text
Private-Key: (768 bit)

The short keys are violating RFC 4871 see Section 3.3.3

How can the keylength be extended?
This is a must for secure signing mails with DKIM/Domainkeys.

See also
http://www.h-online.com/security/new...s-1736423.html
http://tools.ietf.org/html/rfc4871#section-3.3.3

For the Linux version the users have reported private keys are now in 1024 bit.

I have tried with the Windows version using the latest update #10 but still only getting 768 bit key.

Whats up with this then ?

 

[AndreasY]

Hi,

could a Parallels Plesk representative acknowledge this issue and inform Windows users when a 1024 bit key length will be added.

Thanks