DKIM - DNS Settings

Options
Justin Womack
Justin Womack ✭
Ancient Membership Photogenic First Reply
in Release Discussion Forum

The email about the Q3 2013 Release of Luminate Online indicates there will be an update of the email security DKIM signature.



It says, "This feature is enabled automatically. However, for security reasons, you should remove the DNS record of the previous DKIM, 512-bit signature by deleting the DNS TXT record, convio1._domainkey.<mydomain>."



When should clients remove the DNS record of the previous DKIM, and do we have any info about how they should do this? What about timing?

Should they wait for the update?

 

Justin Womack

Enterprise Solution Specialist II

Comments

  • Justin Womack
    Justin Womack ✭
    Ancient Membership Photogenic First Reply

    And now to provide the answers!

     

    In short, you should wait for the upgrade to be complete on your site.

    After that, we recommend that you contact your DNS hosting provider to remove the entry listed above.

     

    If you have any other questions about this, please don't hesitate to contact Support!

     

    Justin Womack

    Enterprise Solution Specialist II

  • Jared Counts
    Jared Counts ✭
    Ancient Membership First Reply
    Justin Womack:

    And now to provide the answers!

     

    In short, you should wait for the upgrade to be complete on your site.

    After that, we recommend that you contact your DNS hosting provider to remove the entry listed above.

     

    If you have any other questions about this, please don't hesitate to contact Support!

     

    Justin Womack

    Enterprise Solution Specialist II

    Hi Justin, I have a question about DKIM and SPF.  My organization has two Convio accounts (KUHT and KUHF) that set up SPF and DKIM for their respective domains (kuhf.org and houstonpbs.org) back in 2008.  I see below that we can delete the DKIM entries.  Do the SPF entries we set up need to be modified at all, or can we leave them as is?

     

    On a related note, our organization has expanded to include two other entities with their own domains (classical917.org and houstonpublicmedia.org).  If we want to be able to send email from our Convio accounts through these domains, do we still need to set up the SPF DNS entries?  Also, since the DKIM keys are generated and attached on Convio's end, would I need to further modify the DNS for either domain?  Or would the new DKIM implementation handle it automatically?

     

    Thank you for your help.

Categories