Digi Email Systems documentation

Digi Email Systems documentation

DKIM and domain authentication

Creating a selector, publishing the DNS record and verifying it before active delivery.

DKIM in DES

From domain detail choose Add DKIM. The system creates or records a selector, public key and fingerprint according to the current release. The private key must remain protected inside DES.

DNS publication

Publish the supplied public key as a TXT record at an address such as:

<selector>._domainkey.example.com

Wait for DNS propagation and verify from a public network that the exact expected value is returned.

Together with SPF and DMARC

DKIM is only one part of domain authentication. Configure correct MX, SPF and DMARC records. Do not publish an aggressive DMARC policy until every legitimate sending source has been verified.

Rotation

Create a new selector, publish it, verify DNS, activate the new key and remove the old one only after a safe overlap period. Preserve the audit trail for the change.