In order to perform a DKIM record see, the DKIM selector is needed. In this article we will cover two methods to find out what DKIM selector is used for a specific source .
What is DKIM? With DKIM, organizations can authenticate their emails in order to protect their e-mail. Find more information about what DKIM is on our web site. A DKIM selector is partially of the DKIM record and it allows publishing multiple DKIM key on domains. Once the picker and the associated domain are in seat, they will need to be validated. The DKIM record check of DMARC Analyzer shows if there is a valid or invalid DKIM key phonograph record. In order to perform a DKIM record match, the DKIM selector is needed. Who provides the DKIM selector?
The DKIM selector that needs to be used, depends on the reservoir where DKIM has to be setup for. Most of the times, the informant for which DKIM has to be setup, mentions the selector in their documentation. For some sources it is possible to pick a customs selector, but this depends on the options the specific transmitter has. Furthermore early senders may require on organization to publish multiple selectors on their domains, for example to support automated DKIM key rotation through CNAME records .
What is DKIM? With DKIM, organizations can authenticate their emails in order to protect their e-mail. Find more information about what DKIM is on our web site. A DKIM selector is partially of the DKIM record and it allows publishing multiple DKIM key on domains. Once the picker and the associated domain are in seat, they will need to be validated. The DKIM record check of DMARC Analyzer shows if there is a valid or invalid DKIM key phonograph record. In order to perform a DKIM record match, the DKIM selector is needed. Who provides the DKIM selector?
The DKIM selector that needs to be used, depends on the reservoir where DKIM has to be setup for. Most of the times, the informant for which DKIM has to be setup, mentions the selector in their documentation. For some sources it is possible to pick a customs selector, but this depends on the options the specific transmitter has. Furthermore early senders may require on organization to publish multiple selectors on their domains, for example to support automated DKIM key rotation through CNAME records .
How to find a DKIM selector for an existing DKIM supported mail flow?
It is potential to find out what DKIM selector a certain beginning uses by sending yourself an electronic mail via that beginning. The steps below show how to find a DKIM picker via sending yourself an electronic mail.
- Send an email to yourself Send an electronic mail to yourself via the informant that you want to know the DKIM selector of.
- View the ‘original message’ / ‘view mail headers’ / ‘raw message’ When you open the e-mail, view the ‘ original message ’ of the electronic mail. Doing so a set of information of the message can be viewed, including the authentication results of DKIM.
Read more: A Few Thoughts on Cryptographic Engineering
- Search for the selector search for ‘ DKIM-Signature ’ to find the DKIM key signature applied to the message. This DKIM-Signature contains an impute ‘ s= ’ which is the selector used. In the model below we can see the DKIM picker is ‘ google ’.
How to find the DKIM selector via the DMARC Analyzer Suite?
Within the DMARC Analyzer Suite it is potential to see the DKIM picker a source uses. This is shown at multiple places, in the steps below we describe the easiest way to find the DKIM picker within the DMARC Analyzer Suite.
Read more: A Few Thoughts on Cryptographic Engineering
- Login to the DMARC Analyzer Suite
- Go to the ‘Per host’ overview of the DMARC aggregate reports
This overview shows all sources sending email on behalf of a certain domain or domains.
- Select the desired source and expand the rows
Expand the rows of the source for which the DKIM selector is being searched. - Look for the DKIM selector in the ‘DKIM verification’ column
Within the DKIM verification column is it possible to view the DKIM selector. This is shown in the image below: In this example we can see that the DKIM selector for Example1.com is Test 1.