Cisco Cisco Email Security Appliance C650 Guía Del Usuario
17-4
Cisco AsyncOS 8.0.2 for Email User Guide
Chapter 17 Email Authentication
Configuring DomainKeys and DKIM Signing
For more information, see
Public Keys
Once you have associated a signing key with a domain profile, you can create DNS text record which
contains your public key. You do this via the Generate link in the DNS Text Record column in the domain
profile listing (or via
contains your public key. You do this via the Generate link in the DNS Text Record column in the domain
profile listing (or via
domainkeysconfig -> profiles -> dnstxt
in the CLI):
Figure 17-2
Generate DNS Text Record Link on Domain Profiles Page
For more information about generating a DNS Text Record, see
You can also view the public key via the View link on the Signing Keys page:
Figure 17-3
View Public Key Link on Signing Keys Page
Domain Profiles
A domain profile associates a sender domain with a signing key, along with some other information
needed for signing.
needed for signing.
•
A name for the domain profile.
•
A domain name (the domain to be included in the “d=” header).
•
A selector (a selector is used to form the query for the public key. In the DNS query type, this value
is prepended to the “_domainkey.” namespace of the sending domain).
is prepended to the “_domainkey.” namespace of the sending domain).
•
A canonicalization method (the method by which the headers and content are prepared for
presentation to the signing algorithm). AsyncOS supports both “simple” and “nofws” for
DomainKeys and “relaxed” and “simple” for DKIM.
presentation to the signing algorithm). AsyncOS supports both “simple” and “nofws” for
DomainKeys and “relaxed” and “simple” for DKIM.
•
A signing key (see
for more information).
•
A list of headers and the body length to sign (DKIM only).
•
A list of tags you want to include in the signature’s header (DKIM only). These tags store the
following information:
following information:
–
The identity of the user or agent (e.g., a mailing list manager) on whose behalf the message is
signed.
signed.