How a Google Headhunter’s E-Mail Unraveled a Massive Net Security Hole

[Chiefcrowe]

http://www.wired.com/2012/10/dkim-vulnerability-widespread/all

 

[John Connor]

Interesting. I think PayPal and ebay doesn't really care about security though. They use RC4 128 and that has been broken. Then when you pay for your items in eBay it doesn't log you out of PayPal once you've payed.

How do I find out the bit strength of a cryptographic DKIM key?

 

[Chiefcrowe]

That is so ironic that Paypal uses an older scheme. I wonder when they will update that?

Good question, I don't know! maybe someone else will chime in.

I believe that to find out the normal SSL website certificate length, in Firefox you go to the certificate and look at the certificate viewer and then go to certificate signature value.