Domain Keys Identified Mail (DKIM) eMail Validation and Signing

WiredRoads · #1 10-04-2007, 04:04 PM

Any thoughts on providing DKIM validation via SPAMAssassin?

How about DKIM signing for outbound eMail?

Thanks.

slapshotw · #2 10-04-2007, 05:50 PM

DomainKeys are very useful if you're sending a large amount of mail. Right now, IP reputation and complaint rate mean a lot more, but they've definitely been increasing the importance of DomainKeys.

That said, SPF is easier to implement and could be just as important if you're sending only a few thousand mails.

esl · #3 10-04-2007, 06:01 PM

Quote:

Originally Posted by slapshotw

That said, SPF is easier to implement and could be just as important if you're sending only a few thousand mails.

to HostGator! Please see my thread on SPF records and domain problems.

http://forums.hostgator.com/showthread.php?t=8401

WiredRoads · #4 10-04-2007, 06:16 PM

I appreciate that DKIM is of different utility to different people. For me, it has nothing to do with how much email that I send. I like DKIM to help reduce the amount of email from spoofed domains. Both from spammers that are trying to spoof from my domain, and from those sending me spoofed email. Of course, I use SPF now. But, SPF can only validate to a domain-mailer association, and so can still be fooled by spoofs originating from the same mailer(s). Not to mention that headers can be spoofed and rewritten, making it difficult to track down who the real sender is. The DKIM signature, if valid, tells me precisely which domain is sending the email. If a DKIM key exists for the domain, but the signature is missing or invalid, then I know that the email might as well be thrown away.

Frankly, I'd like to see something stronger than DKIM that validates down to the From field and/or envelope sender. E.g. a signature added by the mailer client (or server for authenticated SMTP) that refers to a public key off of a website at the same domain.

slapshotw · #5 10-04-2007, 06:40 PM

If you had a dedicated you could do this. I've seen plugins for exim as well. I guess your suggestion is to add it to all shared accounts?

WiredRoads · #6 10-04-2007, 07:05 PM

Quote:

If you had a dedicated you could do this. I've seen plugins for exim as well. I guess your suggestion is to add it to all shared accounts?

Yep.

Thank you.

adriman · #7 12-01-2008, 02:23 AM

Hi,

Here is a good DomainKeys, DKIM and SPF e-mail validator
http://www.myiptest.com/staticpages/...Validator-test