All fixes

Upgrade a DKIM key under 2048 bits

dkim-weak-key

Your DKIM key is under 2048 bits, within reach of an attacker who wants to forge signed mail as you. Generate a 2048-bit key and rotate to it.

Why this matters

Your DKIM signing key is under 2048 bits. It still works, but shorter keys are increasingly vulnerable to brute-force attacks.

Cloudflare

  1. 1 Regenerate your DKIM key pair with at least 2048-bit RSA
  2. 2 Update the TXT record at <selector>._domainkey.yourdomain.com with the new public key
  3. 3 Your email provider's admin panel typically handles key generation
Cloudflare docs

Does your app still have this?

Scan your domain