Digi Email Systems documentation
DKIM and domain authentication
Creating a selector, publishing the DNS record and verifying it before active delivery.
DKIM in DES
From domain detail choose Add DKIM. The system creates or records a selector, public key and fingerprint according to the current release. The private key must remain protected inside DES.
DNS publication
Publish the supplied public key as a TXT record at an address such as:
<selector>._domainkey.example.comWait for DNS propagation and verify from a public network that the exact expected value is returned.
Together with SPF and DMARC
DKIM is only one part of domain authentication. Configure correct MX, SPF and DMARC records. Do not publish an aggressive DMARC policy until every legitimate sending source has been verified.
Rotation
Create a new selector, publish it, verify DNS, activate the new key and remove the old one only after a safe overlap period. Preserve the audit trail for the change.