I'm working on getting DKIM installed on my outgoing mail server, to help my email deliverability to my Yahoo clients (all legit emails, etc, no spamming).

I've got DKIM-Signature: and DomainKey-Signature: headers being generated, but a test mailer to my Yahoo account had this line in the headers:

Authentication-Results: mta250.mail.re2.yahoo.com from=example.com; domainkeys=permerror (no key); from=example.com; dkim=permerror (no key)

Any ideas what I may have missed?

  • Did you set the proper dns records? What is your domain name?
    – cstamas
    Jun 3, 2009 at 7:22

1 Answer 1


You do not have the proper dns records set up.

You can test it youself with policy checker and selector checker. Here is a good tutorial for setting the right records. and also and online form for doing the same. It seems that you have SPF records. You should definitely remove them! Here is a case against spf.

  • my primary use for spf is delivering email to gmail.com. is there an alternative? does gmail support dkim?
    – Ian
    Jun 3, 2009 at 20:44
  • 1
    yes gmail supports dkim
    – cstamas
    Jun 4, 2009 at 8:05
  • 1
    Yes something like that.
    – cstamas
    Jun 4, 2009 at 22:41
  • 1
    Certain big ESPs (like Hotmail) still use SPF and not DKIM, so I wouldn't suggest removing it.
    – user5401
    Jun 9, 2009 at 14:12
  • 2
    @cstamas: that article you refer to is severely outdated, written when there was still some debate about whether or not to use SPF. None of the reasons given by Mr. Pollard have stood the test of time, and SPF is a perfectly valid tool advocated by the majority of major email systems.
    – Mixologic
    Dec 19, 2012 at 16:52

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .