This creates a 2048-bit DKIM signing key for example.com under the selector default. DKIM lets receiving servers verify mail authenticity, so publish the returned TXT record at default._domainkey.example.com. Without the DNS record, signed mail fails verification.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.