DomainKeys Identified Mail, or DKIM, is a system for checking the genuineness of an email message by using an e-signature. When DomainKeys Identified Mail is enabled for a given domain, a public encryption key is published to the global DNS system and a private one is stored on the mail server. If a new message is sent, a signature is generated using the private key and when the message is delivered, the signature is checked by the incoming POP3/IMAP email server using the public key. Thus, the recipient can easily recognize if the email is authentic or if the sender’s email address has been spoofed. A mismatch will appear if the content of the email message has been changed in the meantime as well, so DKIM can also be used to ensure that the sent and the delivered email messages are identical and that nothing has been added or erased. This validation system will strengthen your email safety, as you can verify the genuineness of the important email messages that you receive and your associates can do the exact same thing with the email messages that you send them. Based on the particular email provider’s policy, an email that fails the examination may be erased or may appear in the recipient’s mailbox with a warning.
