DomainKeys Identified Mail (DKIM) is an essential email authentication mechanism designed to verify the authenticity and integrity of email messages.
It works by adding a digital signature to outgoing emails, which can be verified by the recipient’s email server using cryptographic methods. The sending mail server digitally signs the message using a private key. This signature includes a cryptographic hash of various parts of the email, such as the message body and headers, ensuring that the message has not been altered in transit and originates from a legitimate sender. The sending domain publishes a DKIM DNS record containing a public key that corresponds to the private key used for signing. This record is used by receiving mail servers to verify the authenticity of the DKIM signature.
« Back to Glossary Index
