Multiple Provider DKIM Records on a Single Domain

Question

Hi All,
I have one query with respect to managing multiple email provider DKIM on DNS.

I had done set-up for one of domain (test@example.com) on SES to send bulk emails. now the setup is working fine but as per security compliance, I got request to enable DKIM validation for this email ids. As this domain already register on Sendgrid for DKIM validation,  if I register it on AWS SES and do CNAME DNS entries on DNS registrar, then does it impact current environment?

Never managed multiple provider DKIM for single domain. it would be great if someone help to understand terminology.

Thanks,
Aman

Answer

Hello Aman,

DomainKeys Identified Mail (DKIM) is an email security standard designed to make sure that an email that claims to have come from a specific domain was indeed authorized by the owner of that domain.[[1]](https://docs.aws.amazon.com/ses/latest/dg/send-email-authentication-dkim.html) And Amazon Simple Email Service also follows the DKIM email security standard.

According to [RFC 6376: DomainKeys Identified Mail (DKIM) Signatures](https://www.rfc-editor.org/rfc/rfc6376#section-3.1), to support multiple concurrent public keys per signing domain, the key namespace is subdivided using "selectors".

The number of public keys and corresponding selectors for each domain is determined by the domain owner.  Many domain owners will be satisfied with just one selector, whereas administratively distributed organizations can choose to manage disparate selectors and key pairs in different regions or on different email servers.

Hope you will find this information useful. Please let me know if you have any further questions or concerns. I will be more than glad to assist you.

Have a good day!

Best regards,  
Jisoo K.

Multiple Provider DKIM Records on a Single Domain

Relevant content