DomainKeys Identified Mail, or DKIM, is a method for validating the genuineness of an email by using a digital signature. When DKIM is enabled for a particular domain name, a public encryption key is published to the global DNS database and a private one is kept on the email server. When a new email message is sent, a signature is generated using the private key and when the message is received, that signature is validated by the POP3/IMAP mail server using the public key. In this way, the recipient can easily distinguish if the email is authentic or if the sender’s address has been spoofed. A discrepancy will occur if the content of the email has been modified on its way as well, so DKIM can also be used to ensure that the sent and the delivered messages are identical and that nothing has been attached or erased. This email authentication system will enhance your email security, since you can confirm the genuineness of the important email messages that you receive and your partners can do the exact same thing with the emails that you send them. Based on the given mail service provider’s adopted policy, a message that fails the check may be removed or may reach the receiver’s inbox with a warning flag.
