DomainKeys Identified Mail, or DKIM, is a method for validating the genuineness of an email message using a digital signature. When DomainKeys Identified Mail is enabled for a particular domain, a public key is published to the global DNS database and a private one is kept on the email server. If a new message is sent, a signature is generated using the private key and when the message is delivered, that signature is checked by the POP3/IMAP email server using the public key. In this way, the receiver can easily distinguish if the email message is legitimate or if the sender’s address has been spoofed. A discrepancy will occur if the content of the email message has been modified in the meantime as well, so DomainKeys Identified Mail can also be used to ensure that the sent and the received messages are identical and that nothing has been attached or erased. This validation system will increase your email safety, as you can confirm the genuineness of the important email messages that you receive and your partners can do likewise with the email messages that you send them. Based on the particular email service provider’s policy, an email that fails to pass the examination may be deleted or may enter the recipient’s inbox with a warning flag.
