How do external servers know I am using Managed DKIM, and how do they query my records once it's activated?
Once Managed DKIM is activated, the process happens automatically through standard DNS delegation. Here is the step-by-step technical flow:
The Trigger: When you publish the NS (Name Server) record provided by EasyDMARC in your DNS settings, you are effectively "pointing" a specific subdomain to our infrastructure.
The Lookup: When an external mail server receives an email from your domain, it looks for the DKIM public key at selector._domainkey.yourdomain.com.
The Redirection: Upon reaching that record, the external server sees the NS record you've configured. This informs the server that EasyDMARC is the authoritative source for those specific DKIM records.
The Retrieval: The external server then queries EasyDMARC’s managed servers directly to retrieve the active DKIM key and verify the email's authenticity.
The Trigger: When you publish the NS (Name Server) record provided by EasyDMARC in your DNS settings, you are effectively "pointing" a specific subdomain to our infrastructure.
The Lookup: When an external mail server receives an email from your domain, it looks for the DKIM public key at selector._domainkey.yourdomain.com.
The Redirection: Upon reaching that record, the external server sees the NS record you've configured. This informs the server that EasyDMARC is the authoritative source for those specific DKIM records.
The Retrieval: The external server then queries EasyDMARC’s managed servers directly to retrieve the active DKIM key and verify the email's authenticity.