Introduction: The Wax Seal
In the old days, kings would use a wax-and-ring seal to lock their letters. If the seal was broken when the letter arrived, the receiver knew the message had been tampered with. In modern email, DKIM (DomainKeys Identified Mail) is that digital wax seal. It uses high-level mathematics to 'sign' your emails and prove they haven't been changed after you sent them.
In this guide, we'll explain how DKIM provides an essential layer of security that SPF alone cannot offer.
How It Works
When you set up DKIM, your server generates two cryptographic keys: a **Private Key** (kept secret on your server) and a **Public Key** (shared with the world via your DNS settings). Every time you send an email, your server uses the private key to create a unique mathematical 'hash' of the message and adds it to the email header.
When the receiving server gets the mail, it looks up your public key and uses it to verify the signature. If the math matches, the server knows the email is authentic and hasn't been modified by a hacker in transit.
Why DKIM is Better than SPF Alone
While SPF only checks the 'return address', DKIM checks the **content itself**. This prevents sophisticated attacks where a hacker might try to intercept an email and change the links or the banking information inside before it reaches the recipient.
Conclusion
DKIM is the gold standard of email trust. Along with SPF, it forms the 'proof of identity' that most modern email filters require to allow you into the inbox. Check your DKIM signature here.