Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

DKIM: Difference between revisions

230 bytes added ,  2 September 2021
m
(9 intermediate revisions by the same user not shown)
<indicator name="Faults">[[File:Menu-email.svg|link=:Category:Email|30px|Back up to the Email Category]]</indicator>
 
Support staff can help in adding DKIM signing for domains we host.
'''WORK IN PROGRESS
'''
'''Currently being trialled by staff, not available to customers'''
 
'''Examples and confg is likely to change before customers are able to use DKIM
'''
== Important: ==
As with SPF, if you use DKIM/DMARC then you will also want to make sure that all email that you send from your domain is sent through email servers that will sign
Also see [[SPF Record]]
 
DKIM is one of many methods which tries to protect email senders and recipients from spoofing/spam. and to proove that an email hasn't been tampered with.
 
A domain owner can add DNS records which will publish a public key in a specially formatted
This gives some level of confidence that the email was actually sent by the owner of the domain and not spoofed.
 
Optionally, further DNS records (DMARC) can be added which declare to these other email servers receiving the message what should be done with messagesit thatit failfails the DKIM test - eg, do notingnothing, block or quarantine.
 
Even if messages are just signed, then this can help them not to be marked as spam by the recipient. This can help prevent messages that our customers send to gmail/outlook being put in to spam folders.
 
====Long txt records?====
If you are adding your own txt records and they are over 256 characters long, see [[Domains:DNS_Types]] for details on how to 'split' the record in to separate chunks.
 
== Signing by smtp.aa.net.uk ==
 
Customers who meet the following criteria can have their messages signed by our smtp.aa.net.uk email serverrelay:
* We provide DNS services for the Domain
* The three CNAME records below are added (via the control pages)
* You use smtp.aa.net.uk to send out email
 
The A&A email relays, smtp.aa.net.uk, can optionally DKIM sign email that is sent through it.
 
The DNS records required on the customer domain are as follows;
aaisp2._domainkey CNAME aaisp2.dkim.aa.net.uk
aaisp3._domainkey CNAME aaisp3.dkim.aa.net.uk
 
We have three selectors which enable us to roll over the keys easily.
 
== What if I send email via other mail servers ==
=DMARC=
 
This is just a brief overview of DKIMDMARC, you can read more about DKIM on other place or RFC7489
 
Adding a DMARC DNS record is optional, but can be beneficial.
autoreview, Bureaucrats, editor, Interface administrators, reviewer, Administrators
12,264

edits