DomainKeys Identified Mail (DKIM) is an email authentication system designed to detect email spoofing. It allows organizations to take responsibility for transmitting a message, while providing a mechanism to verify that the message was not altered during transit.  DKIM uses cryptographic signatures and public-key infrastructure to verify that an email message has not been altered during transit, and that it truly came from the claimed sender. Email senders can use DKIM to sign their messages by adding a DKIM-Signature header field to the messages. Email receivers can then use the public key published in the DNS to verify the signature and check that the message has not been tampered with. 

You must set up CNAME records for your domain in order to assure that emails sent from your iContact domain have unique DKIM signatures. You must add entries to the following two CNAME records that iContact has provided in order to accomplish this.

How to enable iConnect’s unique DKIM authentication:

• Make the following adjustments to your DNS records by visiting your DNS.
• Set up two CNAMEs (example.com and strong1 and strong2 has been used as examples, replace your domain and desired selector names with it) For instance:

icontact.k1. domainkey.example.com
icontact.k2. domainkey.example.com

• Additionally, direct the two CNAMEs above respectively to the following websites:

k1.dkim.icontact.com
k2.dkim.icontact.com

• After saving the modified entries, make sure the CNAME is configured properly.
• Once the DNS settings are complete, get in touch with iContact support and request them to activate custom DKIM signing.
• Changes don’t start working for 24-48 hour

Use our free DKIM record lookup tool to validate the published DKIM record.

Enable DMARC for your domains to protect against spoofing. Sign up for a free trial today!

For more information on iContact DKIM setup, you can refer to their reference documentation