Who this applies to#
- DKIM signing may be performed by an author organization, relay, or agent
What DKIM requires#
- RSA DKIM must not use rsa-sha1 and signing keys must be at least 1024 bits
What this does not require#
- DKIM does not prove the identity of the human author
Common mistakes#
- Treating the signing domain as proof of the human author
DKIM checklist#
- Identify the signing domain
- Use permitted cryptography
- Check alignment for receiving policies
Commonly confused with#
OnVoard's take#
DKIM is strongest when its signing identity is understood alongside the visible From domain.