DomainKeys Identified Mail
DKIM · A method that adds a digital signature made with the domain's private key to outgoing e-mail, which the recipient checks against the public key published in DNS.
- 01
Why it matters
DKIM proves that the e-mail was not altered in transit and really came from the domain's authorised server. SPF can break on forwarded mail, but the DKIM signature usually survives, which makes it important for DMARC to work reliably. Keys should be at least 2048 bits and rotated from time to time.
- 02
Example
A company enables DKIM in its e-mail provider's panel and adds the given record to DNS. The next day the headers of sent e-mails show the signature verified, and failures in DMARC reports drop.
- 03
Common mistake
Enabling DKIM only at the main e-mail provider and forgetting the invoicing, newsletter and support systems. Every service that sends with your domain should sign with its own key.
- 04
Let's talk about your project.
Tell us what you need; we will define the scope together.