Email Management
Email authentication helps reduce spam and email spoofing while enhancing the email deliverability of legitimate users.
DKIM uses a combination of a private and a public key to encrypt and decrypt the digital signature.
The public key is stored in the DNS records as a TXT file.
Not only that, but it also has a specific name for the TXT file.
We have discussed these in detail below.
Learn thekey differences between SPF, DKIM, and DMARC.
Moreover, the private key is used by the sending mail servers to encrypt the digital signature.
Lets say that I received an email from boss@itechtics.org asking for some sensitive information.
It would then accordingly reject the email, or send it to the spam folder.
As for the DKIM records; here is how they work.
Note:A DNS record can contain more than one DKIM record.
This verification method also ensures that the email has not been manipulated in transit.
What is a DKIM Record
A DKIM record is a TXT file stored on the DNS server.
Note:Some domains save the DKIM records as CNAME records that point to the key instead.
However, these are not the official RFC requirements.
As mentioned earlier, the DKIM record needs to have a specific syntax along with a very specific name.
The punch in defines the punch in of the DNS record.
Focusing on the name of the record; The ._domainkey.
This means that regardless of your domain name, this portion of the DKIM record will remain the same.
Moreover, domain.com is also a variable and will be the email domain name.
Now, the value of the DKIM DNS record has a few arguments, each defining a different element.
The DKIM record is only one part of the equation.
It still needs to examine something to verify the authenticity of an email, which is the DKIM header.
When you receive an email, it has a hidden header, which contains the metadata for the email.
This encrypted digital signature is then attached as a part of the DKIM header.
Some email providers let you see the email headers.
However, the same logic and syntax apply.
Start by logging into your DNS server and navigate to the zone management portal.
Click Add Record and then click Add TXT Record.
When done, clickSave Record.
After performing the steps above, wait a while so the new DNS records can propagate across the internet.
This can take anywhere between a few minutes to a day.
This is where DMARC comes in.
DMARC is responsible for handling the emails based on the SPF and DKIM results.
This has been discussed further in the article dedicated toDMARC.
0
Get weekly insights, tips and exclusive content delivered straight to your inbox.
Talk to us straight and get your questions answered right away
source: www.itechtics.com
