DomainKeys Identified Mail, or DKIM, is a method for verifying the authenticity of an email message using an e-signature. When DomainKeys Identified Mail is enabled for a particular domain name, a public key is published to the global Domain Name System and a private one is stored on the mail server. When a new email message is sent, a signature is issued using the private key and when the email message is received, the signature is verified by the incoming POP3/IMAP email server using the public key. In this way, the recipient can easily tell if the message is genuine or if the sender’s address has been spoofed. A discrepancy will appear if the content of the email has been altered on its way as well, so DomainKeys Identified Mail can also be used to make sure that the sent and the received emails are identical and that nothing has been added or removed. This email validation system will strengthen your email security, as you can validate the authenticity of the important emails that you get and your colleagues can do the same with the messages that you send them. Depending on the given mail service provider’s adopted policies, a message that fails to pass the check may be erased or may appear in the receiver’s inbox with a warning symbol.
