DomainKeys Identified Mail (DKIM) is an email security system that detects email spoofing and ensures the integrity of emails. It works by validating the identity of the domain name associated with the email through cryptographic authentication.
What is email spoofing?
Scammers often send emails by altering the sender's name and address to make it appear to be coming from a trusted contact. This technique is used to mislead victims into believing the email is legitimate.
How does DKIM detect email spoofing?
What does this prove?
Comparing the hash generated by DKIM with the decrypted hash from the DKIM signature, we know if:
a) DKIM domain really does own the email;
b) Elements of the email signed by DKIM were changed.
Benefits of DKIM
Even though DKIM is difficult to implement, it guarantees that the domain visible to the end user is the same as the domains validated by security systems--thereby ensuring email authentication. It also helps mailbox providers detect which emails should be held to the DKIM authentication standard and which shouldn’t.
Publisher