I'm working on getting DKIM installed on my outgoing mail server, to help my email deliverability to my Yahoo clients (all legit emails, etc, no spamming).

I've got DKIM-Signature: and DomainKey-Signature: headers being generated, but a test mailer to my Yahoo account had this line in the headers:

Authentication-Results: mta250.mail.re2.yahoo.com from=example.com; domainkeys=permerror (no key); from=example.com; dkim=permerror (no key)

Any ideas what I may have missed?

link|improve this question

65% accept rate
Did you set the proper dns records? What is your domain name? – cstamas Jun 3 '09 at 7:22
feedback

1 Answer

up vote 3 down vote accepted

You do not have the proper dns records set up.

You can test it youself with policy checker and selector checker. Here is a good tutorial for setting the right records. and also and online form for doing the same. It seems that you have SPF records. You should definitely remove them! Here is a case against spf.

Ask if you have any questions!

link|improve this answer
my primary use for spf is delivering email to gmail.com. is there an alternative? does gmail support dkim? – Ian Jun 3 '09 at 20:44
yes gmail supports dkim – cstamas Jun 4 '09 at 8:05
so basically DKIM can be seen as a non-bad replacement for spf? – Ian Jun 4 '09 at 22:37
Yes something like that. – cstamas Jun 4 '09 at 22:41
Certain big ESPs (like Hotmail) still use SPF and not DKIM, so I wouldn't suggest removing it. – user5401 Jun 9 '09 at 14:12
show 2 more comments
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.