DKIM Record: What it is and Why it Matters

what is a decim record a decim record is a digital signature that is added on the email header and it act as a form of authentication verifying that email was sent from sender's email server to the recipient email server and in between email was not altered or compromised how does the dkim record work when the email sent from sender email server that time sender email server generates the digital signature based on the message content and the header and this signature is then encrypted and added to the emails header as the decim record then message or the email goes to the recipient Exchange Server recipient Exchange Server then retrieve the became public key from the domain from the email that came right that from the domain it's retrieved the public key decrypt the email header and see the based on the signature it checks if there is any mismatch if the recipient server found any mismatch then that time only it stamped as a failed decrement them this is how the dkim record work why is the became record important because dkim records provide an additional layer of security for email message helping to prevent email spoofing and phishing attack emails thing is when malicious individual or any hackers try to send the email that appears to be from sender's domain right trusted source and often this intention is to get the sensitive information right and if you have proper decimal record in place the recipient server will check okay this email is not came from the proper proper domain reject that email on the DNS level so this is the this is how the became work and the importance of the dkim and in addition to the security benefit the Kim record also can improve the email uh deliverability because many email servers nowadays use dkm as additional factor for a Spam filtering algorithm in the spam filtering organ algorithm having a valid dkm record can increase the chances that your emails will reach to the recipient's Inbox and how to set up the camera I will show you now how to set up a dkm record you need to generate a unique dkim key and add to your domain DNS record the specific steps will verify the depending on your domain register but generally you will need to access your DNS record and add the TST record with your dkim key information I will show you how to generate the unique dkim key so for that you need to come on the security stick for that you need to come on the security.microsoft.com in here please go to the policy and rules and then trade policies and under this you will see the email authentication settings when you click on this and the second tab is the decaying right so now you will see your all the verified domains you will see here and it's a Authority right so I can click on this and see now currently it's a disabled for this because I have not set up the dkim record for my domain as of now so I'll click this enable and it will generate the dkim key for me the unique key for me right this is the its key is generated and I just need to copy this so I need to copy all this one Notepad so I got this information and this like long information showing because I have not enabled my dkm as of now so I need to extract the the unique value from this so I'll just quickly I'll edit this domain name this is my domain and the host name is this and it should be the point to address or the value this and then the another record host sector two domain key and the points to address value of this and the rest of the things I just don't need so I just delete so this is my record that I need to add in my DNS and create a cname record and then it will so let me jump on to my DNS portal and let me open my DNS manage DNS for the easy firstsecurity.com and I'll create a cinema record here if you yeah cname record I'll just create add record I add the host as a sector one domain key and I will point to the see I'll show you here so I'll copy this value copy and then I'll add value here and Save and then I'll add another record C name add pad sector 2 domain key this one and the value I will add this this key is publicly available so you anytime you can see this there is no security issue for me so you can check anytime now I have added this and it changed the DNS record may take up to 48 hours but let's anyways I'll just keep uh let me enable this and let's see if obviously 65 detects that it's not so I'll try up to some time and I will show you once this enables now you can see after the five minutes uh it shows that my D key is signature is enabled and I'm just clicking OK and you see the last checking time is this but see the rotation of the Kim key down down D Kim key is uh generated and it's uh I published also right good security practice is uh at least once in a year you should rotate the dkim key update your DNA server a DNS entry with updated so that you have a proper security yeah this is a small demo for bkim and the next video I will talk about the market record how you can set up and what is the importance of demarc record and where you can use it uh yeah that's thanks thanks and if you like this video please like And subscribe to my channel and uh thank you happy learning bye

Channel: How IT Works

Views: 699

Keywords: How to assign License in Office365, How to assign License to Multiple users in Office365 / Microsoft 365, Microsoft office 365, How to create account in office365, windows 10, windows10 tips and tricks, Office365, Intune, Microsoft Intune, Microsoft azure, MCAS, cloud app security, defender for office, defender for Endpoint, exchange online, shared mailbox, mailbox permission, mailflow, exchange migration, Azure active Directory setup, Free Office365, Free Microsoft 365

Id: jA-tSwQap-w

Length: 6min 59sec (419 seconds)

Published: Wed Feb 01 2023