I'm working on getting DKIM installed on my outgoing mail server, to help my email deliverability to my Yahoo clients (all legit emails, etc, no spamming).

I've got DKIM-Signature: and DomainKey-Signature: headers being generated, but a test mailer to my Yahoo account had this line in the headers:

Authentication-Results: mta250.mail.re2.yahoo.com from=example.com; domainkeys=permerror (no key); from=example.com; dkim=permerror (no key)

Any ideas what I may have missed?

  • Did you set the proper dns records? What is your domain name? – cstamas Jun 3 '09 at 7:22

You do not have the proper dns records set up.

You can test it youself with policy checker and selector checker. Here is a good tutorial for setting the right records. and also and online form for doing the same. It seems that you have SPF records. You should definitely remove them! Here is a case against spf.

| improve this answer | |
  • my primary use for spf is delivering email to gmail.com. is there an alternative? does gmail support dkim? – Ian Jun 3 '09 at 20:44
  • 1
    yes gmail supports dkim – cstamas Jun 4 '09 at 8:05
  • 1
    Yes something like that. – cstamas Jun 4 '09 at 22:41
  • 1
    Certain big ESPs (like Hotmail) still use SPF and not DKIM, so I wouldn't suggest removing it. – user5401 Jun 9 '09 at 14:12
  • 2
    @cstamas: that article you refer to is severely outdated, written when there was still some debate about whether or not to use SPF. None of the reasons given by Mr. Pollard have stood the test of time, and SPF is a perfectly valid tool advocated by the majority of major email systems. – Mixologic Dec 19 '12 at 16:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.