Our organization is setting up an account with a third party cloud service that will be sending emails on our behalf. Our marketing department would like to eliminate the "via" or "on behalf of" bits that some clients show so that it looks like the emails came directly from us. Looking over the third party's help page on this subject, they request that we insert a DKIM record into our zone for their server. We currently implement SPF for our mail servers, but not DKIM.
- Is just a DKIM TXT record sufficient for allowing the third party to send mail on behalf of our organization (without updating our SPF policy, or adding any other records referring to their server)?
- Apart from the obvious that we're allowing a third party to send legitimate email from our domain, is there any impact on the rest of our system (security or otherwise) from inserting this DKIM record?