Thursday, March 05, 2020

caution when checking domainkey DKIM DNS records

I made a mistake when checking if a particular domain has DKIM records set - I just queried for TXT records on the domain, like
dig domainname.com TXT

That would return SPF records, but not domainkey DKIM records, since DKIM records can have arbitrary names, so looking at the DNS control panel is the better solution. And then can double-check when the DKIM record name is known, like
dig default._domainkey.domainname.com TXT
or
dig providername._domainkey.domainname.com TXT
and so on.

No comments:

Post a Comment