DKIM

DomainKeys Identified Mail (DKIM) is a technique for domain authentication that helps to stop spam, spoofing, and scams. By adding an encrypted signature to the email’s header, recipients can confirm that the email really did originate from the sender.

To confirm that an email message was sent from a trusted mail server, DKIM uses a method called “public key cryptography.” By confirming the sender’s identity, this public key strategy stops spam and phishing emails.

Simple Mail Transfer Protocol (SMTP), the usual email protocol, lacks an internal mechanism for confirming a sender’s identity, but with DKIM you can verify it automatically and block the email if it fails verification.

DKIM functions by including a cryptographic signature in the email message header. The organization’s DNS (Domain Name System) records contain a matching cryptographic key that can be used to verify that signature. It follows these steps:

• The domain owner adds a public key to their DNS record.
• All emails sent from that domain have a cryptographic signature added to them.
• The email recipient’s server checks the cryptographic key against the DNS record to confirm the email genuinely came from the domain it claims.

You need to use a trusted means to verify your identity if you are a business that sends commercial emails. However, installing a DKIM key is not enough to properly authenticate incoming and outgoing emails. It needs to be set up correctly. To be fully secure, you should also implement SPF and DMARC safeguards.