DKIM

The Xurrent service makes it possible to sign outbound email messages using a DomainKeys Identified Mail (DKIM) key generated for your organization. DKIM signing increases email security and helps prevent email spoofing.

It is recommended to use a DKIM domain key generated for your organization on all outbound email messages. If email signing is not turned on with a DKIM domain key of your organization, Xurrent signs all outbound email messages with this default DKIM domain key: d=4me.com.

DKIM signing of outbound email messages for your organization's Xurrent account can be set up using the following steps:

Generate domain key

In the "Email Policy" section of the Settings console, click on the Set up DKIM button. The "Generate New DKIM Keys" popup window is shown:

Populate the following fields:

• DKIM domain: the public domain name the Xurrent service will use to send email notifications
• Selector: defaults to account name, but it can be any text value
• DKIM key bit length: defaults to 2048

Click on the Generate button.

The "Enhanced security for outbound email messages (DKIM)" popup window is shown:

Copy the TXT record name and value. They are needed for the next step.

Add domain key to DNS records

Create a new DKIM record in the public DNS server of the external domain. The exact steps will vary depending on DNS provider.

Complete the following steps to verify the new DNS settings for the DKIM record:

• Online tools
  There are numerous online tools which allow validating a DKIM record, for example: dmarcian and mxtoolbox.
• Microsoft Windows
  Run the following command: nslookup -type=txt <selector>._domainkey.<dkim-domain>
• Unix based OS
  Run the following command in a terminal window: dig <selector>._domainkey.<dkim-domain> TXT

For example:
$ dig +short default._domainkey.4me.com TXT

Once the new DNS entry is created and has propagated, move on to the next step.

Turn on DKIM authentication

In the "Email Policy" section of the Settings console, click on the Set up DKIM button. The "Enhanced security for outbound email messages (DKIM)" popup window is shown, see the screenshot above.

Click the Start Authenticating button within the popup window. After that, the status "Authenticating email" with a green check mark indicates the DKIM settings and DNS entry were successfully tested and are working properly.

Click once outside the popup window to close the window.

Click on the Save button at the bottom of the "Email Policy" section of the Settings console to complete the DKIM setup.