hmLoadTopic({
hmKeywords:"Cryptographic,Cryptographic Signing,Cryptographic Verification,DKIM,DKIM,DKIM Overview,DomainKeys Identified Mail,Signing Messages,Verifying Signatures",
hmTitle:"DomainKeys Identified Mail",
hmDescription:"DomainKeys Identified Mail (DKIM) is a cryptographic email verification system that can be utilized to prevent spoofing (forging another person\'s email address in order to pose...",
hmPrevLink:"security--spf__sender_id.html",
hmNextLink:"security--dkim_verify.html",
hmParentLink:"security_menu.html",
hmBreadCrumbs:"<a href=\"security_menu.html\">Security Menu<\/a> &gt; Security Manager &gt; Sender Authentication",
hmTitlePath:"Security Menu > Security Manager > Sender Authentication > DomainKeys Identified Mail",
hmHeader:"<h1 class=\"p_Heading1\" style=\"page-break-after: avoid;\"><span class=\"f_Heading1\">DomainKeys Identified Mail<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_BodyText\"><span class=\"f_BodyText\">DomainKeys Identified Mail (DKIM) is a cryptographic email verification system that can be utilized to prevent spoofing (forging another person<\/span><span style=\"font-family: \'Times New Roman\',Times,Georgia,serif; color: #010100;\">\'<\/span><span class=\"f_BodyText\">s email address in order to pose as a different message sender). Additionally, because most junk email (spam) messages contain spoofed addresses, DKIM can help greatly in the reduction of spam even though the specifications weren\'t specifically designed to be an anti-spam tool. DKIM can also be used to ensure the integrity of incoming messages, or ensure that the message hasn\'t been tampered with between the time it left the signing mail server and arrived at yours. In other words, with DKIM cryptographic verification the receiving server can be certain that the arriving message is from the server that signed it, and that no one changed that message in any way.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">In order to ensure the validity and integrity of messages, DKIM uses a public and private key-pairs system. An encrypted public key is published to the sending server<\/span><span style=\"font-family: \'Times New Roman\',Times,Georgia,serif; color: #010100;\">\'<\/span><span class=\"f_BodyText\">s DNS records and then each outgoing message is signed by the server using the corresponding encrypted private key. For incoming messages, when the receiving server sees that a message has been signed, it will retrieve the public key from the sending server<\/span><span style=\"font-family: \'Times New Roman\',Times,Georgia,serif; color: #010100;\">\'<\/span><span class=\"f_BodyText\">s DNS records and then compare that key with the message<\/span><span style=\"font-family: \'Times New Roman\',Times,Georgia,serif; color: #010100;\">\'<\/span><span class=\"f_BodyText\">s cryptographic signature to determine its validity. If the incoming message cannot be verified then the receiving server knows it contains a spoofed address or has been tampered with or changed. A failed message can then be rejected, or it can be accepted but have its spam score adjusted.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">To configure MDaemon to verify incoming cryptographically signed messages, use the options provided on the <a href=\"security--dkim_verify.html\" class=\"topiclink\">DKIM Verification<\/a> screen. To configure MDaemon to sign outgoing messages, use the options provided on the <a href=\"security--dkim_sign.html\" class=\"topiclink\">DKIM Signing<\/a> screen. Both are located under the Sender Authentication section of the Security Settings dialog, at: <\/span><span class=\"f_MenuPath\">Security <\/span><span class=\"f_MenuPath\" style=\"font-family: Verdana,Geneva,Arial,sans-serif;\">»<\/span><span class=\"f_MenuPath\"> Security Settings <\/span><span class=\"f_MenuPath\" style=\"font-family: Verdana,Geneva,Arial,sans-serif;\">»<\/span><span class=\"f_MenuPath\"> Sender Authentication<\/span><span class=\"f_BodyText\">. MDaemon<\/span><span style=\"font-family: \'Times New Roman\',Times,Georgia,serif; color: #010100;\">\'<\/span><span class=\"f_BodyText\">s <a href=\"mdaemons_main_display.html\" class=\"topiclink\">main interface<\/a> includes a &quot;DKIM&quot; tab (located under the Security tab) that can be used for monitoring DKIM activity in real time, and you can log DKIM activity using the option at: <\/span><span class=\"f_MenuPath\">Setup <\/span><span class=\"f_MenuPath\" style=\"font-family: Verdana,Geneva,Arial,sans-serif;\">»<\/span><span class=\"f_MenuPath\"> Server Settings <\/span><span class=\"f_MenuPath\" style=\"font-family: Verdana,Geneva,Arial,sans-serif;\">»<\/span><span class=\"f_MenuPath\"> Logging <\/span><span class=\"f_MenuPath\" style=\"font-family: Verdana,Geneva,Arial,sans-serif;\">»<\/span><span class=\"f_MenuPath\"> Settings<\/span><span class=\"f_BodyText\">.<\/span><\/p>\n\r<p class=\"p_SeeAlso\" style=\"page-break-after: avoid; border-right: none; border-bottom: none; border-left: none;\"><span class=\"f_SeeAlso\">See:<\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"security--dkim_verify.html\" class=\"topiclink\">DKIM Verification<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"security--dkim_sign.html\" class=\"topiclink\">DKIM Signing<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"security--dkim_options.html\" class=\"topiclink\">DKIM Settings<\/a><\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">&nbsp;<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">For more on DomainKeys Identified Mail, visit: <\/span><span class=\"f_SeeAlsoLinks\" style=\"font-weight: normal;\"><a href=\"http:\/\/www.dkim.org\/\" target=\"_blank\" class=\"weblink\">http:\/\/www.dkim.org\/<\/a><\/span><span class=\"f_ControlIndent\">.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">&nbsp;<\/span><\/p>\n\r"
})
