Domain: | |
Selector: | |
Key Length: |
DKIM records are a crucial layer of security in the fight against email spoofing. Spoofing is when malicious actors disguise their email address to appear as if they're sending from someone else, often a trusted source like your bank or employer. DKIM utilizes cryptography to verify the legitimacy of an email's sender, ensuring it truly originated from the claimed domain.
Here's the process: When an email server with DKIM enabled sends a message, it adds a digital signature to the email header. This signature is generated using a cryptographic key pair—a private key held by the sender and a matching public key. The public key is published as a TXT record within the domain's DNS (Domain Name System) records, making it easily accessible to receiving email servers.
When an email arrives, the receiving server retrieves the sender's public key from the DNS record. It then uses this public key to verify the digital signature attached to the email. If the signature verification is successful, it confirms that the email originated from a legitimate source authorized by the domain owner. This significantly reduces the risk of email spoofing and phishing attacks, where attackers attempt to impersonate legitimate senders to deceive recipients.
Once you have it set up, it's time to test it with our very own eMail Tester.
TAG | MEANING |
---|---|
v | This tag specifies the DKIM version being used. Currently, the most common value is "v=DKIM1". |
a | This tag identifies the cryptographic algorithm used to generate the digital signature. A common value is "rsa-sha256". |
d | This tag indicates the domain name used with the selector record (another tag) to locate the sender's public key in the DNS. |
s | This tag specifies the selector record name used to find the public key. It's essentially a subdomain created by the sender for DKIM purposes. |
c | This tag can specify additional canonicalization methods used when creating the signature. |
h | This tag can list the email header fields included in the signature calculation. |
t | This tag can specify the time the signature was created. |
Become a part of the Campaign Cleaner community today, and join countless satisfied customers who have witnessed significant improvements in their email deliverability and campaign success. Don't let HTML issues hold you back; let Campaign Cleaner optimize your campaigns and boost your inbox rates