{"id":199,"date":"2010-04-29T02:05:53","date_gmt":"2010-04-29T02:05:53","guid":{"rendered":"http:\/\/samwebman.wordpress.com\/?p=199"},"modified":"2010-04-29T02:05:53","modified_gmt":"2010-04-29T02:05:53","slug":"how-to-use-domainkeys-signature","status":"publish","type":"post","link":"https:\/\/www.intentrust.com\/?p=199","title":{"rendered":"How to use DomainKeys Signature"},"content":{"rendered":"

DomainKeys is a technology proposal that can bring black and white back to this decision process by giving email providers a mechanism for verifying both the domain of each email sender and the integrity of the messages sent. To learn more detail about DomainKeys, please refer to http:\/\/antispam.yahoo.com\/domainkeys<\/a><\/p>\n

DKIM is a similar technology as Domainkeys. To learn more detail about DKIM, please refer to RFC4871.<\/p>\n

Now, EmailArchitect Server<\/span><\/strong> provides a way to add DomainKeys signature and DKIM signature to outgoing email.<\/p>\n

Make key-pair certificate<\/strong><\/p>\n

First of all, we need to generate a certificate which contains public key\/private key. We can use MakeCert.exe (.NET Framework Tools) to generate certificate like this:<\/p>\n

makecert -pe -n \"CN=mydomainkeys\" -ss my -sr LocalMachine -a sha1 -sky signature -r\n<\/pre>\n
Then you can check the certficate like this:<\/p>\n
Windows Start Menu->input:\nMMC\n\npress enter.\n\nMMC->File Menu->Add\/Remove Span-in\nAdd->Choose \"Certificates\"-> Computer Account->Local Machine->Finish->Close.\n\nThen you should find the certificate at\n\"Certificates(Local Computer)->Personal->Certificates\"\n<\/pre>\n
You can also use this online tool to generate the certificate
\nhttp:\/\/mail.adminsystem.com\/getpfx\/getpfx.aspx<\/a><\/p>\n
Create X-DK-File<\/strong><\/p>\n
To sign the DomainKeys with EmailArchitect Server, we need to create a  text file with notepad. and save it.<\/p>\n
For example:\nWe create a adminsystem.com.domainkey.txt and contains the following content.\n\ndk_d: adminsystem.com\ndk_s: s1024\nCertStore: machine\nCertStoreName: my\nCertSubjectName: mydomainkeys\nDKIMSupport: yes\nmethod: nofws\n\ndk_d is the email sender domain,\ndk_s is the domain public key  selector.\nCertSubjectName is the keyword in certificate subject.\nIf DKIMSupport is \"yes\", then DKIM signature will be added as well.\nIf method is \"simple\", then Domainkeys\/DKIM signature uses \"simple\" algorithm;\nIf method is \"nofws\", then Domainkeys\/DKIM signature uses \"nofws\/relaxed\" algorithm;\n<\/pre>\n
You can also export the certificate with MMC. If importing private key is chosen, the *.pfx will be generated.<\/p>\n
then the adminsystem.com.domainkey.txt should contain the following content\ndk_d: adminsystem.com\ndk_s: s1024\nPFXPath: c:\\my cert\\adminsystem.pfx\nPFXPassword: mypassword\nDKIMSupport: yes\nmethod: simple\n\ndk_d is the email sender domain,\ndk_s is the domain public key  selector.\nPFXPath is the PFX file full path.\nPFXPassword is the PFX file password.\nIf DKIMSupport is \"yes\", then DKIM signature will be added as well.\nIf method is \"simple\", then Domainkeys\/DKIM signature uses \"simple\" algorithm;\nIf method is \"nofws\", then Domainkeys\/DKIM signature uses \"nofws\/relaxed\" algorithm;\n<\/pre>\n
Finally, we just need to copy this file to EmailArchitect Server  installation path\\domainkeys folder. EmailArchitect Server will generate the DomainKeys signature and DKIM  signature for email from domain “adminsystem.com” automatically. The file name syntax must be “[domain name].domainkey.txt”<\/strong>.<\/p>\n
Deploy Public Key<\/strong><\/p>\n
We also need to deploy the certificate Public Key to your domain DNS  server. You can use the online tool  http:\/\/emailarchitect.com\/live\/getpublickey.aspx<\/a> to export the Public Key of your certificate.<\/p>\n
Once you get the public key, you should set a TXT record in your domain  DNS server.  For example: your selector is s1024, your domain is adminsystem.com,  then you should create a TXT record for s1024._domainkey.adminsystem.com and set the following  content in the record.<\/p>\n
s1024._domainkey.adminsystem.com       text =\n\n        \"t=y; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCmKsozkVJqlNAGsvn1LoJPmoZl8nizv6pIuOV5P\n44E8C6Vbl4DW8p0Bb5Zg8EgpYRgsEiJX5pYDj67YzzXNIhViziHwQ3jbUedxNkw\/6GV4ZX8aRJKJnwnYqGWIQ8tQESwQtywfduQ2\nTjsS1aG3XeOgxxEeuhBNaZHQWVThSinuQIDAQAB\"\n<\/pre>\n
To learn more detail  about Public Key deployment, please refer to http:\/\/antispam.yahoo.com\/domainkeys<\/a><\/p>\n
Test DomainKeys and DKIM<\/strong><\/p>\n
You just need to send an email to check-auth@verifier.port25.com<\/strong>,  then a report will be send back to your sender email address.<\/p><\/blockquote>\n
reference from: http:\/\/www.emailarchitect.net\/emailserver\/doc\/html\/domainkeys.htm<\/p>\n","protected":false},"excerpt":{"rendered":"
DomainKeys is a technology proposal that can bring blac … <\/p>\n
\u95b1\u8b80\u5168\u6587\u3008How to use DomainKeys Signature\u3009<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[11],"tags":[58],"_links":{"self":[{"href":"https:\/\/www.intentrust.com\/index.php?rest_route=\/wp\/v2\/posts\/199"}],"collection":[{"href":"https:\/\/www.intentrust.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intentrust.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intentrust.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intentrust.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=199"}],"version-history":[{"count":0,"href":"https:\/\/www.intentrust.com\/index.php?rest_route=\/wp\/v2\/posts\/199\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.intentrust.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=199"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intentrust.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=199"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intentrust.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=199"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}