JanosDKIM DNS record – Explained
Every DKIM Signature provides a selector and a domain indicating which DNS-Records hosts the public key required to decode the signature.
Example of a DKIM-Signature:
“v=1; a=rsa-sha256; c=relaxed/relaxed; d=janos.work; s=jb; h=mime-version:reply-to:sender:auto-submitted:message-id:date:subject :from:to; bh=… “
This indicates to the recipient server which DNS-record to query and what email headers are included in the signature.
Building a DKIM DNS record
<selector(s=)>._domainkey.<domain(d=)>. TXT "v=DKIM1; p=<public key>“
<jb(s=)>._domainkey.<janos.work(d=)>. TXT "v=DKIM1; p=<public key>“
Actual DKIM DNS record
jb._domainkey.janos.work. TXT "v=DKIM1; p=eg39w45gh23gu3bn289fg...“
Sources & Further Reading
Official & Regulatory
- _domainkey DNS TXT Record Tag Specifications
https://www.iana.org/assignments/dkim-parameters/dkim-parameters.xhtml#dkim-parameters-5
Montu
