DKIM (Domain Keys Identified Mail ) is a email authentication method designed to detect whether mail is sended by authorized mail server or not.
It is doing by adding digital signature to email’s header , this digital signature is verified by receiver mail server.
How DKIM Works ?
- Sender Side :
- The sender mail server generated public-private key.
- The private key is secured and it’s using for generating email digital signature.
- The email digital signature is attached with the email’s special type of DKIM header.
- Receiver Side :
- The Receiver Mail Server receive the mail and check the digital signature.
- The receiver mail server fetch the key from sender mail server’s DNS record. Public key is available in the email.
- After getting Both key , Verify the Digital signature.
- If the digital signature is valid , It means the email was sent by authorized mail server and does not spoofed.
- If the digital signature is not valid , It means the email was sent by unauthorized mail server.