DomainKeys Identified Mail, or DKIM, is a method for verifying the authenticity of an email message using a digital signature. When DKIM is activated for a certain domain, a public key is published to the global DNS database and a private one is stored on the email server. When a new email message is sent, a signature is issued using the private key and when the email message is received, that signature is verified by the incoming POP3/IMAP server using the public key. In this way, the recipient can easily recognize if the message is authentic or if the sender’s email address has been spoofed. A mismatch will occur if the content of the email message has been altered in the meantime as well, so DomainKeys Identified Mail can also be used to ensure that the sent and the delivered emails are identical and that nothing has been added or erased. This authentication system will enhance your email security, as you can validate the legitimacy of the important emails that you receive and your associates can do the same with the messages that you send them. Depending on the particular mail service provider’s policy, a message that fails the examination may be deleted or may appear in the recipient’s mailbox with a warning alert.
