11

If I am sending mail through SMTP, I understand that it is IONOS who signs those emails, right?

I would like to add the DKIM header to my emails. I know that it is necessary to publish a CNAME record with the public key but if I don't use a third-party service, I understand that it is ionos who must have that private key and therefore offer me the public key.

If ionos does not offer me the public key, what do I do? Since IONOS is in charge of signing the mail with the private key and adding the DKIM header, if they don't give me a public key, what is the solution or is something wrong with the approach?

Has anyone got something similar? Should I send an email to IONOS requesting the public key?

3
  • 1
    What do you mean? If IONOS handles your mail, they are the third party service. Aug 15, 2020 at 20:06
  • Sorry, that's confusing. I was referring to other third-party services such as malchip etc if they offer you their publick key generated from their private key. IONOS from what I see does not offer public key to add dkim and as if it did not offer support
    – Diego
    Aug 15, 2020 at 21:40
  • It's 30 May 2023 and having been given the run around by IONOS's support operatives for c. 30 minutes, I learned that they still don't support DKIM authentication (on shared servers at least), and there's still no ETA. The person I spoke to erroneously claimed that SPF is in effect the same as DKIM and as such implementing DKIM is unnecessary. May 30, 2023 at 9:43

4 Answers 4

14

it is IONOS who signs those emails, right?

It would be, if they signed them. But they don't. (But they should.)

Here are some excerpts of a conversation I had less than 10 minutes ago with their support team (emphasis added):

IONOS: Hello there. I understand that you want to add a DKIM. Unfortunately we don't have a DKIM record in IONOS. You can instead a Dmarc record and SPF record to authenticate your emails.

Me: Er, to clarify- are you saying that IONOS e-mail hosting does not use or support DKIM authentication of outbound mail?

IONOS: Yes. That is correct. We do not have a DKIM record. But you can use an SPF record . SPF record is enough to authenticate your emails

Me: Do you know when/if IONOS will add DKIM to outbound e-mails?

IONOS: I'm not sure if they will integrate a DKIM in our current mailing system. And also it make time some time for that to happen.
But rest assured I will forward your concern to our administrators, product engineers / system engineers.

'Tis the wild west over there. Not a cryptographic signature in sight. Set your DMARC to SPF-only until you can shell out for a 21st-century mail host.

2
  • 3
    I had the same conversion with Ionos yesterday; they still don't support DKIM and no ETA in sight. However, the support agent mentioned that the situation may be different if using their Microsoft Exchange email product. Haven't looked into that yet.
    – Manuel
    May 4, 2022 at 11:33
  • 2
    IONOS Support says they still do not support DKIM.
    – Ben in CA
    Feb 15, 2023 at 16:14
3

I had a similar conversation with them yesterday. I was told that implementing DKIM was on their road map, but the support operative was unable to give me an indicative timescale. I'm not holding my breath as I'm not convinced that the operative I spoke to actually understood the question and may have just wanted to get rid of this guy speaking gobbledygook.

2
3

I just wasted an hour on chat with Ionos support asking for DKIM information. First I was offered this link:

https://www.ionos.com/help/domains/configuring-mail-servers-and-other-related-records/configuring-a-dmarc-record-for-a-domain/?utm_source=search&utm_medium=global&utm_term=DKIM%20record&utm_campaign=HELP_CENTER&utm_content=/help

Then the support tech sent me this link:

https://www.ionos.com/digitalguide/e-mail/e-mail-security/dkim-domainkeys/

Next I was told to generate my own keypair using:

https://easydmarc.com/tools/DKIM-record-generator

I asked to whom should I send the private key for installation on smtp.ionos.com. .....crickets

Then my chat was transferred and dropped.

I endeavored to persevere and started another chat with server support. This tech correctly told me that Ionos did not support DKIM. I asked that Ionos implement DKIM as customers have been requesting it for at least three years. Then my chat was dropped.

0

IONOS does now finally support DKIM. They added it recently, maybe September 2023 or maybe more recent. I found out earlier this week when my emails randomly started passing DKIM one day -- IONOS had added the DNS settings to my domain. Would have been nice if they notified or asked me so that I didn't think my domain had been hacked, but still glad they do it now. Here's a link to the article that says what DNS settings you need in case they you need to set it up manually: https://www.ionos.com/help/domains/configuring-mail-servers-and-other-related-records/email-authentication-with-dkim/

4
  • I host and manage DNS via DigitalOcean, but use IONOS domain & email services. Confused how to add CNAME to DNS. This is what it looks like when I try to add CNAME record via web interface: hostname -> s1-ionos._domainkey.mydomain.com & alias value -> s1.dkim.ionos.com. Is that correct?
    – i--
    Mar 3 at 16:11
  • 1
    @i-- that looks correct to me, assuming "mydomain.com" is actually your domain and that you also added the other 2 entries. You also need to be using an IONOS email server to send emails, that's the part that adds the DKIM signature. Are you having issues getting DKIM to pass after adding all of the CNAMEs?
    – Dtor
    Mar 4 at 19:33
  • Have not tried yet. Was wondering how providers would guess those subdomains. That gives me some insight. Thanks for the help.
    – i--
    Mar 5 at 21:01
  • Worked, woohoo!
    – i--
    Mar 5 at 21:10

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .