From 6624966d706f060acac4024e0569560758a12bcc Mon Sep 17 00:00:00 2001 From: Dennis Baaten Date: Fri, 30 Aug 2019 19:07:48 +0200 Subject: [PATCH] Update DKIM-how-to.md --- DKIM-how-to.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/DKIM-how-to.md b/DKIM-how-to.md index 8fad5d3..5abcf5d 100644 --- a/DKIM-how-to.md +++ b/DKIM-how-to.md @@ -26,7 +26,7 @@ A common used technique used by spammers is to trick the receiving party into be # Tips, tricks and notices for implementation * Use a DKIM key (RSA) of [at least 1024 bits](https://tools.ietf.org/html/rfc6376#section-3.3.3) to minimize the successrate of offline attacks. Don't go beyond a key size of 2048 bits since this is not mandatory according to the RFC. * Make sure you to change your DKIM keys regularly. A rotation scheme of 6 months is recommended. -* Parked domains should be explicitly configured to not use e-mail. For DKIM this is done with an empty policy: "v=DKIM1; p=". +* It is generally recommended to explicitly configure parked domains to not use e-mail. For DKIM this is done with an empty policy: "v=DKIM1; p=". # Implementing DKIM with OpenDKIM for Postfix with SpamAssassin **Specifics for this setup**