DomainKeys Identified Mail (DKIM) integration

The DomainKeys Identified Mail (DKIM) functionality provides an email authentication method to help ensure that a message is not modified while it is in transit from an organization’s protected domains. The implementation depends on a set of keys (private and public), which a recipient domain can use to verify the sender domain. DKIM settings are configured on the page Settings > Inbound/Outbound > DKIM Settings.

A DKIM integration has the following components:

  • Email signing
  • Email verification

For the signing element, a private key resides in the mail transfer agent, providing a digital signature that is added to the header of each message sent from a protected domain. A public key is generated and published in the DNS as a text record that is used by a recipient mail system in the verification process.

A signing rule associates specified sender domains with a private and public key set.