Wednesday, February 20, 2008

What’s DKIM got to do with it?

Ever heard of DKIM? Think of it as your overnight shipping source – your FedEx or UPS for email. DomainKeys Identified Mail (DKIM) allows an organization to take responsibility for a message while in transit. This handling organization could be the originator or an intermediary; and it’s their reputation that the ISP uses as a basis for delivery.

How does it work?
The handling organization adds a digital signature to the message; this signature associates the domain name of the organization – DKIM permits signing to be performed by an authorized third-party. The owner of the domain (being used for a DKIM signature) is declaring that they are accountable for the message, reading between the lines… their reputation is at stake. Receivers, successfully validating the signature, use information about the signer to limit spam, spoofing, phishing etc.

The use of DKIM doesn’t necessarily improve deliverability or guarantee inbox placement – that is at the discretion of the validating receiver(s). Most receivers use their knowledge about the DKIM signer to determine how to handle the message; therefore one could assume that messages from a signer with a good reputation would be subject to less scrutiny.

Not all ISPs use this authentication, find out who does and learn more at the DKIM website.

0 comments: