DomainKey Implementation

DomainKeys is a sender authentication technology used to prevent spammers from spoofing mail headers and launching phishing attacks. Domain Key adds Digital signature to all the Outgoing mail to Internet and receiver domain will validated the receiving emails from the DNS TXT record.

 

Domain owners has to generate public and private key pair and Public key is published in the DNS as TXT record and private key is used to sing on the receiver outgoing emails. With Digital Signature receiving Domain verifying the incoming emails from the legitimate mail server for that domain. The sender of an email message is authenticated
by querying the sending domain’s DNS TXT records. This prevents external spammers to forge the header and send spam mails.

 

Below is the example of the domain key DNS TXT Entry

 

Selector._domainkey.domain.com IN TXT “k=rsa; t=y; p=ABCXYXWITHADASDFWv60IpRT/AduJ6tGqHwuCW0ycbc68yNxnhpqAT5aILkUB7uAmQV17jykxr6YG2Wwq

 
If Domain key fails in the receiving domain then suitable action will be taken bases on the configuration of the receiving domain. 

If sender domain is not configured with domain key then receiver will not find digital signature then emails are processed normally

Steps to Implement

1. Generate Public Key and Private Key

2. Public private in the Internet DNS TXT record for the domain in the test mode (t=y as given in the above example)

3.  http://domainkeys.sourceforge.net/selectorcheck.html – Test the configuration from the link

4. Bring into live

Below link will provide you more details on the below domain key and testing of the same

http://domainkeys.sourceforge.net/

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s