DKIMPROBLEM.comDKIM Record Analysis
DKIM Syntax
This page explains the main DKIM DNS tags that appear in DKIM selector records.
| Tag | What It Does |
|---|---|
v=DKIM1 |
Marks the TXT record as a DKIM selector record. |
k=rsa |
Declares the key type. RSA is the most common DKIM key type. |
p= |
Contains the Base64-encoded public key used to validate DKIM signatures. |
t=s |
Strictly limits use of the selector to the exact domain rather than subdomains. |
t=y |
Testing mode. Indicates the selector may still be in test use. |
n= |
Optional notes field for administrators. |
h= |
Optional list of acceptable hash algorithms. |
s= |
Optional service type tag, commonly email. |
A valid DKIM record normally includes at least v=DKIM1 and a p= value containing the public key.
selector1._domainkey.example.com TXT "v=DKIM1; k=rsa; p=..."A direct DKIM TXT record. The selector in the DKIM-Signature header must match the DNS selector being checked.
selector1._domainkey.example.com CNAME selector1.example.netA delegated selector pattern used by many sending platforms. The CNAME target should publish the DKIM TXT record.
v=DKIM1; p=An empty public key is usually used to revoke a selector and should not be treated as an active signing key.