3 ms·
A domain with a DMARC record specifying a strict DKIM checking policy and an absent DKIM record can't realistically be considered a legacy domain.
by avian 6y ago
A domain with a DMARC record specifying a strict DKIM checking policy and an absent DKIM record can't realistically be considered a legacy domain.
- zinekeller 6y agoBut DKIM has already existed since around 2004, but the first draft of DMARC was seven years after that. In other words, the empty DKIM is for backward compatibilty that signals to other servers which does not yet read DMARC but already does DKIM verification that this domain does not send emails.
- Denvercoder9 6y agoIf the message isn't signed, the receiver won't do a DKIM lookup. If the message is signed, whether the record is absent or empty doesn't matter, validation will fail.