
|
Technical Overview Signs body and selected header fields Signature transmitted in DKIM-Signature header field DKIM-Signature is self-signed Signature includes the signing identity (not inherently tied to From:, Sender:, or even header) Initially, public key stored in DNS (new RR type, fall back to TXT) in _domainkey subdomain Namespace divided using selectors, allowing multiple keys for aging, delegation, etc. Sender Signing Policy lookup for unsigned, improperly signed, or third-party signed mail |