DomainKeys_notes.txt 2.1 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455
  1. CREATE DKIM KEYS and DNS Resource Record:
  2. =========================================
  3. To create DomainKeys Identified Mail keys, visit:
  4. http://dkim.worxware.com/
  5. ... read the information, fill in the form, and download the ZIP file
  6. containing the public key, private key, DNS Resource Record and instructions
  7. to add to your DNS Zone Record, and the PHPMailer code to enable DKIM
  8. digital signing.
  9. /*** PROTECT YOUR PRIVATE & PUBLIC KEYS ***/
  10. You need to protect your DKIM private and public keys from being viewed or
  11. accessed. Add protection to your .htaccess file as in this example:
  12. # secure htkeyprivate file
  13. <Files .htkeyprivate>
  14. order allow,deny
  15. deny from all
  16. </Files>
  17. # secure htkeypublic file
  18. <Files .htkeypublic>
  19. order allow,deny
  20. deny from all
  21. </Files>
  22. (the actual .htaccess additions are in the ZIP file sent back to you from
  23. http://dkim.worxware.com/
  24. A few notes on using DomainKey Identified Mail (DKIM):
  25. You do not need to use PHPMailer to DKIM sign emails IF:
  26. - you enable DomainKey support and add the DNS resource record
  27. - you use your outbound mail server
  28. If you are a third-party emailer that works on behalf of domain owners to
  29. send their emails from your own server:
  30. - you absolutely have to DKIM sign outbound emails
  31. - the domain owner has to add the DNS resource record to match the
  32. private key, public key, selector, identity, and domain that you create
  33. - use caution with the "selector" ... at least one "selector" will already
  34. exist in the DNS Zone Record of the domain at the domain owner's server
  35. you need to ensure that the "selector" you use is unique
  36. Note: since the IP address will not match the domain owner's DNS Zone record
  37. you can be certain that email providers that validate based on DomainKey will
  38. check the domain owner's DNS Zone record for your DNS resource record. Before
  39. sending out emails on behalf of domain owners, ensure they have entered the
  40. DNS resource record you provided them.
  41. Enjoy!
  42. Andy
  43. PS. if you need additional information about DKIM, please see:
  44. http://www.dkim.org/info/dkim-faq.html