Search Close
Email Security Blog

What are the differences between DomainKeys (DK) and DKIM?

Danielle Tristao September 16th, 2014 How Email Works
Fallback Featured Image

This is the second in a new ongoing series for us that gives you the tips and tricks you need for successful DMARC deployment . Read the previous tip here

DomainKeys Identified Mail (DKIM) is the successor to Yahoo DomainKeys. Both share similarities, however DKIM has the additional aspects of Cisco’s Identified Internet Mail standard (IIM). The enhancements to this standard gives more security and flexibility then DomainKeys alone. Some of the main differences between DK and DKIM are the following:

  • DKIM allows for multiple signature algorithms (DK only allows one)
  • DKIM has more options which would allow you to validate both header and body.
  • DKIM allows third parties to sign.
  • DKIM allows self-sign the DKIM-Signature header field (helps protect against modification)
  • DKIM gives you the option to use wildcard on some parameters.
  • DKIM supports signature timeouts in DNS.


Leave a Reply

Your email will not be published. All fields are required.

February 20, 2018 Jacob Rideout

Strengthen DKIM Signatures with DCRUP

February 15, 2018 Markus Jakobsson

How SMS 2FA Might Leave You Vulnerable to Email Account Takeover

February 13, 2018 Jacob Rideout

The Arrival of ARC

July 24, 2017 Markus Jakobsson

The Threat Taxonomy: A Working Framework to Describe Cyber Attacks

September 28, 2016 Gabriel Ortiz

Software Ate My Infrastructure: 2 Years on AWS with Ansible, Terraform and Packer - Part 2

mobile image