{"id":130,"date":"2020-01-07T11:03:36","date_gmt":"2020-01-07T11:03:36","guid":{"rendered":"https:\/\/www.quantatec.ltd\/support\/?p=130"},"modified":"2021-02-04T13:17:19","modified_gmt":"2021-02-04T13:17:19","slug":"how-do-i-add-a-dkim-record","status":"publish","type":"post","link":"https:\/\/www.quantatec.ltd\/support\/how-do-i-add-a-dkim-record\/","title":{"rendered":"How do I add a DKIM record?"},"content":{"rendered":"<p>DKIM, like SPF, is a standard that enables a specific aspect of the email sending process to be authenticated. The premise of DKIM is to check that an email is really from the domain or sender that it said it was sent from and\u00a0if it\u00a0has been altered in any way in transit.<\/p>\n<p>Specifically, DKIM (DomainKeys Identified Mail), provides a foundation for distinguishing legitimate mail. A DKIM signature is placed in the header of emails sent by our mail servers, so that the receiving mail server can then validate the signature using a public cryptographic key (2048 bit). It&#8217;s added as a TXT record in the Manage DNS section for the domain name.<\/p>\n<p>DKIM does not outright mean all emails will be delivered. However, it does provide the receiving mail server with further information so it can make a more informed decision on the best way to handle the email.<\/p>\n<p>To add one:<\/p>\n<ul>\n<li>Head to\u00a0<a href=\"https:\/\/cp.quantatec.cloud\/manage\" target=\"_blank\" rel=\"noopener noreferrer\"><strong>Manage Hosting<\/strong><\/a>\u00a0and &#8216;Manage&#8217; the package you want to add a DKIM record.<\/li>\n<li>Select the\u00a0<strong>DomainKeys<\/strong>\u00a0icon.<\/li>\n<\/ul>\n<p>Firstly, we&#8217;ll explain<strong>\u00a0how to add a simple DKIM record<\/strong>\u00a0to your DNS.<\/p>\n<ul>\n<li>Ensure you\u2019ve selected the domain you want to add the DKIM record-to.<\/li>\n<li>Add a\u00a0<strong>Selector.\u00a0<\/strong>This can be any value or name you like. It\u2019s simply a field to identify the DKIM record. Then select\u00a0<strong>Add Signature<\/strong>.<\/li>\n<\/ul>\n<p><img decoding=\"async\" class=\"img-responsive\" src=\"https:\/\/www.quantatec.ltd\/support\/wp-content\/uploads\/2020\/04\/DKIM-New.jpg\" alt=\"DKIM signatures\" \/><\/p>\n<ul>\n<li>If your nameservers are with QuantaTec, we\u2019ll automatically add the correct TXT record for you.<\/li>\n<\/ul>\n<p><img decoding=\"async\" class=\"img-responsive\" src=\"https:\/\/www.quantatec.ltd\/support\/wp-content\/uploads\/2020\/04\/DKIM-Added.jpg\" alt=\"TXT record\" \/><\/p>\n<p>The signature will be added immediately to emails sent from the mailboxes under the domain selected. We will have automatically added a DNS record to\u00a0<strong>Manage DNS.\u00a0<\/strong>You may wish to wait for this to resolve for DKIM to be effective.<\/p>\n<p>From here you\u2019re all done: your emails will use DKIM as a method to authenticate email.<\/p>\n<p>You can also use the\u00a0<strong>Advanced Options<\/strong>\u00a0section.<\/p>\n<p><b>Note:<\/b>\u00a0This is only recommended if you\u2019re familiar with customising DKIM signatures. Below is a description of each section and how it alters the DKIM signature that\u2019s added to the header of emails sent.<\/p>\n<p><img decoding=\"async\" class=\"img-responsive\" src=\"https:\/\/www.quantatec.ltd\/support\/wp-content\/uploads\/2020\/04\/DKIM-Advanced.jpg\" alt=\"Add DKIM signature\" \/><\/p>\n<p><strong>Selector<\/strong>\u00a0\u2013 This is a unique identifier for the DKIM record and can be set to any value you like. For example you could set it to indicate the name of an office location or\u00a0the signing date (e.g. \u201coctober2019\u201d).<\/p>\n<p><strong>Granularity<\/strong><strong>\/Identity<\/strong>\u00a0\u2013 By default this is set to a wildcard value: &#8216;*&#8217;. You can use this field to\u00a0set the DKIM record to be assigned to a specific mailbox, allowing you to constrain which mailbox can use this selector legitimately. For example, if you set the value of this field to be \u2018sales\u2019, only your\u00a0<a href=\"mailto:sales@domain.com\">sales@domain.com<\/a>\u00a0mailbox will use this DKIM signature. This field must match the local part of the signing address (mailbox).<\/p>\n<p><strong>Note<\/strong>\u00a0\u2013 This field does not form part of the DKIM record or signature and is simply there so you can record any information about this record for your own information.<\/p>\n<p><strong>Service Type \u2013\u00a0<\/strong>Currently, DKIM only supports signatures added to messages sent via \u2018Email\u2019 (i.e. SMTP). However, in the future the DKIM standard may add more service types such as IM or VoIP, which we\u2019ll then be able to support. This field can be left to either \u2018*\u2019 or \u2018Email\u2019 &#8211;\u00a0changing this won\u2019t influence behaviour at present.<\/p>\n<p><strong>Canonicalization<\/strong>\u00a0\u2013 Some mail servers and relay systems may modify an email in transit, potentially invalidating a DKIM signature. There are two options you can set: &#8216;Simple&#8217; and &#8216;Relaxed&#8217;. If you expect your email to be modified in any way, you\u00a0should select\u00a0<strong>Relaxed\u00a0<\/strong>which is more forgiving to changes made the header and body of the email.<\/p>\n<p><strong>Expiry Time<\/strong>\u00a0\u2013 This is the time which, when elapsed, the DKIM signature will be invalidated in the mail header. By default it\u2019s set to 86400 seconds (1 day). You may wish to extend this if you believe deliverability of the email will take longer than 1 day.<\/p>\n<p><strong>Flags<\/strong>\u00a0&#8211; There are\u00a0two flags available: &#8216;Production&#8217; and &#8216;Testing&#8217;. If you select\u00a0<strong>Testing<\/strong>, you&#8217;ll still receive a response to the email and the DKIM signature from the remote mail server, but the email won&#8217;t be treated with different behaviour.\u00a0Verifier systems may wish to track testing mode results to assist the signer. You&#8217;ll mostly want to use\u00a0<strong>Production<\/strong>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>DKIM, like SPF, is a standard that enables a specific aspect of the email sending process to be authenticated. The premise of DKIM is to check that an email is really from the domain or sender that it said it was sent from and\u00a0if it\u00a0has been altered in any way in transit. Specifically, DKIM (DomainKeys &hellip; <a href=\"https:\/\/www.quantatec.ltd\/support\/how-do-i-add-a-dkim-record\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">How do I add a DKIM record?<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-130","post","type-post","status-publish","format-standard","hentry","category-email-hosting"],"_links":{"self":[{"href":"https:\/\/www.quantatec.ltd\/support\/wp-json\/wp\/v2\/posts\/130","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.quantatec.ltd\/support\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.quantatec.ltd\/support\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.quantatec.ltd\/support\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.quantatec.ltd\/support\/wp-json\/wp\/v2\/comments?post=130"}],"version-history":[{"count":5,"href":"https:\/\/www.quantatec.ltd\/support\/wp-json\/wp\/v2\/posts\/130\/revisions"}],"predecessor-version":[{"id":138,"href":"https:\/\/www.quantatec.ltd\/support\/wp-json\/wp\/v2\/posts\/130\/revisions\/138"}],"wp:attachment":[{"href":"https:\/\/www.quantatec.ltd\/support\/wp-json\/wp\/v2\/media?parent=130"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.quantatec.ltd\/support\/wp-json\/wp\/v2\/categories?post=130"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.quantatec.ltd\/support\/wp-json\/wp\/v2\/tags?post=130"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}