mirror of
https://github.com/renbaoshuo/S2OJ.git
synced 2024-11-15 11:58:41 +00:00
56 lines
2.0 KiB
Plaintext
56 lines
2.0 KiB
Plaintext
|
CREATE DKIM KEYS and DNS Resource Record:
|
||
|
|
=========================================
|
||
|
|
|
||
|
|
To create DomainKeys Identified Mail keys, visit:
|
||
|
|
http://dkim.worxware.com/
|
||
|
|
... read the information, fill in the form, and download the ZIP file
|
||
|
|
containing the public key, private key, DNS Resource Record and instructions
|
||
|
|
to add to your DNS Zone Record, and the PHPMailer code to enable DKIM
|
||
|
|
digital signing.
|
||
|
|
|
||
|
|
/*** PROTECT YOUR PRIVATE & PUBLIC KEYS ***/
|
||
|
|
|
||
|
|
You need to protect your DKIM private and public keys from being viewed or
|
||
|
|
accessed. Add protection to your .htaccess file as in this example:
|
||
|
|
|
||
|
|
# secure htkeyprivate file
|
||
|
|
<Files .htkeyprivate>
|
||
|
|
order allow,deny
|
||
|
|
deny from all
|
||
|
|
</Files>
|
||
|
|
|
||
|
|
# secure htkeypublic file
|
||
|
|
<Files .htkeypublic>
|
||
|
|
order allow,deny
|
||
|
|
deny from all
|
||
|
|
</Files>
|
||
|
|
|
||
|
|
(the actual .htaccess additions are in the ZIP file sent back to you from
|
||
|
|
http://dkim.worxware.com/
|
||
|
|
|
||
|
|
A few notes on using DomainKey Identified Mail (DKIM):
|
||
|
|
|
||
|
|
You do not need to use PHPMailer to DKIM sign emails IF:
|
||
|
|
- you enable DomainKey support and add the DNS resource record
|
||
|
|
- you use your outbound mail server
|
||
|
|
|
||
|
|
If you are a third-party emailer that works on behalf of domain owners to
|
||
|
|
send their emails from your own server:
|
||
|
|
- you absolutely have to DKIM sign outbound emails
|
||
|
|
- the domain owner has to add the DNS resource record to match the
|
||
|
|
private key, public key, selector, identity, and domain that you create
|
||
|
|
- use caution with the "selector" ... at least one "selector" will already
|
||
|
|
exist in the DNS Zone Record of the domain at the domain owner's server
|
||
|
|
you need to ensure that the "selector" you use is unique
|
||
|
|
Note: since the IP address will not match the domain owner's DNS Zone record
|
||
|
|
you can be certain that email providers that validate based on DomainKey will
|
||
|
|
check the domain owner's DNS Zone record for your DNS resource record. Before
|
||
|
|
sending out emails on behalf of domain owners, ensure they have entered the
|
||
|
|
DNS resource record you provided them.
|
||
|
|
|
||
|
|
Enjoy!
|
||
|
|
Andy
|
||
|
|
|
||
|
|
PS. if you need additional information about DKIM, please see:
|
||
|
|
http://www.dkim.org/info/dkim-faq.html
|