DKIM records properly resolved but empty

Question

Hi,  
I'm struggling with the DKIM configuration on the SES - the situation is as follows:  
- DKIM: enabled  
- DKIM Verification Status: verified  
- all the three records generated by Amazon are properly resolved from my domain to *.dkim.amazonses.com domains.  
  
However, for 2 out of 3 when I do   
"nslookup -q=TXT here_goes_my_id.dkim.amazonses.com"  
I get:  
Non-authoritative answer:  
here_goes_my_id.dkim.amazonses.com	text = ""  
  
Only one of them have proper "p=publickey" content set for the text field.  
What could be the problem?  
This is an old configuration, and I only discovered that due to some delivery issues reported recently.

AWS-User-0957087 · Accepted Answer

Hi,  
  
This is as expected and won't cause delivery issues. Only one record is active at a time; the other 2 are used when keys are rotated.  
  
You can see more details in this blog post: https://aws.amazon.com/blogs/messaging-and-targeting/dkim-troubleshooting-series-your-dkim-status-is-pending/

mdibella · Answer

You are replying to an answered thread.   Post your question in a new thread.   Make sure you provide details of your implementation and configuration.  
  
Edited by: mdibella on Nov 17, 2021 7:06 PM

aws-ms · Answer

Thank you, that explains a lot! :)

tsader · Answer

I have set up everything correctly as well and everything shows as verified. Yet, every time I send out an email and I check its raw source the DKIM fails. It always says DKIM=fail  
  
Why is that happening?

DKIM records properly resolved but empty

Relevant content