{"id":9349,"date":"2025-11-23T23:17:54","date_gmt":"2025-11-23T23:17:54","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=9349"},"modified":"2025-11-23T23:27:51","modified_gmt":"2025-11-23T23:27:51","slug":"how-to-audit-dkim-record-selector-use","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/how-to-audit-dkim-record-selector-use","title":{"rendered":"How to Audit DKIM Record Selector Use"},"content":{"rendered":"\n<p>Recently had a customer go through an Third Party Security Audit and found out <\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Issue:<\/strong>\u00a0The public DKIM key size is\u00a0<strong>1024 bits<\/strong>, which is below the recommended minimum of\u00a0<strong>2048 bits<\/strong>.<\/li>\n\n\n\n<li><strong>Impact:<\/strong>\u00a0Shorter keys may be vulnerable to cryptographic attacks and reduce email authentication strength.<\/li>\n\n\n\n<li><strong>Recommendation:<\/strong>\u00a0Please generate a new DKIM keypair with a key size of\u00a0<strong>2048 bits or greater<\/strong>\u00a0using OpenSSL or your preferred SSL tool, and update your DNS records accordingly.<\/li>\n<\/ul>\n\n\n\n<p>The problem was this customer had been taken from another provide so we had no logs of what the existing DKIM keys were being used for and the Keys were generic<\/p>\n\n\n\n<p>The first question was were they were being still used?<\/p>\n\n\n\n<p>As we used Cloudflare we could actually audit the DNS Records if there we being asked for <\/p>\n\n\n\n<p>Change the Analytics to 7 Days <\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/11\/image-18.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"309\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/11\/image-18-1024x309.png\" alt=\"\" class=\"wp-image-9352 img-responsive\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/11\/image-18-1024x309.png 1024w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/11\/image-18-300x91.png 300w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/11\/image-18-768x232.png 768w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/11\/image-18.png 1412w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/11\/image-17.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"160\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/11\/image-17-1024x160.png\" alt=\"\" class=\"wp-image-9350 img-responsive\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/11\/image-17-1024x160.png 1024w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/11\/image-17-300x47.png 300w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/11\/image-17-768x120.png 768w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/11\/image-17.png 1380w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Recently had a customer go through an Third Party Security Audit and found out The problem was this customer had been taken from another provide so we [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-9349","post","type-post","status-publish","format-standard","hentry","category-research"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/9349","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/comments?post=9349"}],"version-history":[{"count":2,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/9349\/revisions"}],"predecessor-version":[{"id":9354,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/9349\/revisions\/9354"}],"wp:attachment":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/media?parent=9349"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/categories?post=9349"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/tags?post=9349"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}