The Advanced DKIM Signing option requires significant knowledge and understanding of DNS.
For users looking for full control over the DKIM signatures generated for the messages processing through their SocketLabs On-Demand server the Advanced Signing Option gives it to you. The first thing you'll need to do is choose a Selector value. This value should only be alphanumeric characters, and we recommend less than 10 total characters. SocketLabs frequently uses the characters “dkim” for its selector. The selector is not used in the generation of the public / private key pair. It will only be used to provide server and DNS setup instructions specific to you.
Once you have chosen a Selector value we recommend using our DKIM Key
Keep this page open and record this information in a safe place. The first thing you should do is create the DNS entry of your public key on your domain. We recommend doing this first as it can take a period of time for these values to become verifiable by the SocketLabs On-Demand Control Panel. Once you’ve created the associated DNS entries, fill in the appropriate fields in the SocketLabs On-Demand Control Panel DKIM Signing Advanced page:
- DKIM Domain - Your domain
- DKIM Selector - Value you selected and used in the DKIM key generator
- DKIM Private Key - The private key generated by the generator. Please ensure the header and footer generated in the generator are fully intact when submitting your private key.
The SocketLabs On-Demand Control Panel will not allow you to save the settings until it can verify the public key based on the domain and selector provided.
Custom DKIM signatures will only be applied to messages that have a Purported Responsible Address (PRA) at the domain in which a custom signing option has been established. In most cases the PRA is the From Address, or the Sender Address.
For more information about DKIM authentication technology please see our other article: DomainKeys Identified Mail (DKIM) Authentication
For more information about SPF authentication please see our related article: Sender Policy Framework (SPF)
Further questions about DKIM signing and email authentication should be emailed to Support.