3 ms·
Presumably there is a transitional period during which the new DKIM key becomes active and the old inactive. Will some legitimate mails fail verification during
by scandox 3y ago
Presumably there is a transitional period during which the new DKIM key becomes active and the old inactive. Will some legitimate mails fail verification during that period?
- gorgoiler 3y agoYou can have multiple keys at once: serve the old keys while announcing and using a new key.
- alphager 3y agoNo. You can have multiple DKIM DNS records (each identified by an id called selector). Each DKIM signature includes the selector. When you change keys, you create a new DNS entry with a new selector, then change the settings of the mailserver. New mails will then be signed by the new key with the new selector. Old mails can still be verified until you delete the old DNS entry.