WEBVTT

00:00:00.000 --> 00:00:06.000
What does a DKIM signature do for business email?

00:00:06.000 --> 00:00:13.000
It lets a receiver verify a signing domain and signed message data.

00:00:13.000 --> 00:00:18.000
Follow the signature check.
6 DKIM basics.

00:00:18.000 --> 00:00:30.000
DKIM uses a digital signature
DomainKeys Identified Mail is the full name.
Signing domain · Digital signature · Email authentication

00:00:30.000 --> 00:00:42.000
The sender keeps a private key
The sending service uses it to sign outgoing email.
Private signing key · Sending service · Protected configuration

00:00:42.000 --> 00:00:54.000
DNS publishes the public key
Receiving servers use the public key to check the signature.
Public verification key · DNS record · Receiver check

00:00:54.000 --> 00:01:06.000
A selector finds the right key
The message identifies which published signing key to use.
Signing domain · Selector value · Matching DNS key

00:01:06.000 --> 00:01:18.000
Check each sending service
A website mail service may need its own authentication setup.
Mailbox provider · Form-mail provider · Separate setup checks

00:01:18.000 --> 00:01:30.000
Keep the limits in mind
A valid signature alone does not prove a message is safe or wanted.
Authentication signal · Related SPF and DMARC · Still assess the message

00:01:30.000 --> 00:01:39.000
Your checklist
DKIM uses a digital signature · The sender keeps a private key · DNS publishes the public key · A selector finds the right key · Check each sending service · Keep the limits in mind

00:01:39.000 --> 00:01:47.000
Verify the actual messages your services send.
jerseyweb.je