Summary
Testing for automatic domain appending by DNS providers in DKIM records involves several approaches. GoDaddy is known to automatically append domains, requiring users to avoid manual inclusion. Online DKIM checkers (MXToolbox, DNSQueries.com) and DNS lookup tools (dig, nslookup) display the actual served record, enabling comparison. Domain Connect offers programmatic DNS management. Users can also contact DNS provider support, consult community forums, or leverage ESP assistance. Tools like dig and provider dashboards offer insight. Awareness of DNS syntax (RFC 1035) and DKIM selector function is useful.
Key findings
- GoDaddy Auto-Appends: GoDaddy automatically appends the domain name to DKIM records.
- Online DKIM Checkers: Online tools like MXToolbox and DNSQueries.com verify DKIM setup and highlight appending issues.
- DNS Lookup Tools: `dig` and `nslookup` query DNS and reveal actual served records.
- Domain Connect: Domain Connect is a standardized, programmatic DNS management solution.
- Provider Support: DNS provider support assists with configuration and appending issues.
Key considerations
- Compare Record Values: Visually compare entered vs. served record values to detect appending.
- Check TXT Records: Verify correct TXT records within DNS settings.
- Consult Community: Leverage community forums for shared experiences.
- Check ESP Account: Verify the email service provider (ESP) setup aligns with DKIM configuration requirements.
- dig Tool Expertise: Copy and paste the output from the `dig` tool and have someone technical check if you don't understand the results.
What email marketers say
12 marketer opinions
Testing whether a DNS provider automatically appends the domain to DKIM records requires understanding provider-specific behaviors and utilizing DNS lookup tools. GoDaddy is a known provider that automatically appends the domain, causing potential issues if users manually add it. Various online DKIM record checkers (e.g., MXToolbox, DNSQueries.com) and DNS lookup tools (e.g., dig, nslookup) can display the actual record value being served, allowing for comparison with the entered value. Alternatively, users can seek direct assistance from the DNS provider's support team or community forums. Domain Connect provides a standardized solution for programmatic DNS record management.
Key opinions
- GoDaddy Appends Domain: GoDaddy automatically appends the domain name to DKIM records, which requires specific attention during setup.
- Online DKIM Checkers: Online DKIM record checker tools can verify DKIM record setup and highlight domain appending issues.
- DNS Lookup Tools: Tools like `dig` and `nslookup` can be used to query DNS records and check raw values to confirm if a domain is being appended.
- Provider Support: Contacting the DNS provider's support team can provide accurate guidance on DKIM record configuration and domain appending.
- Domain Connect: Domain Connect offers a standardized, programmatic way to manage DNS records, simplifying setup and reducing errors.
Key considerations
- Compare Entered vs. Served: Visually compare the entered DKIM record value with the value returned by DNS lookup tools to identify domain appending.
- Check TXT Records: Ensure you are checking the correct TXT records within your DNS settings, either through the provider's interface or via DNS lookup tools.
- Consult Community: Leverage community forums and support channels for assistance, as others may have encountered similar issues with specific DNS providers.
- Monitor DNS Changes: Utilize DNS monitoring tools to alert you to changes in your DNS records.
Marketer view
Email marketer from MXToolbox shares that their online DKIM record checker not only validates the DKIM record but also shows the exact value of the record being fetched from the DNS server. This helps identify if the domain name is being appended automatically.
18 Apr 2024 - MXToolbox
Marketer view
Email marketer from Twitter suggests that a user should get help from community forums, as most people have had similar issues and can guide them through the problem.
21 Dec 2024 - Twitter
What the experts say
2 expert opinions
Experts advise non-technical users to check for domain appending in DKIM records using online DNS lookup tools (e.g., SpamResource.com, MXToolbox) to view the published TXT record after entering it into DNS. Users can also consult their email service provider (ESP) to ensure correct account setup.
Key opinions
- Use DNS Lookup Tools: Online DNS lookup tools help view the actual DKIM TXT record being published.
- Consult ESP: Email service providers (ESPs) can verify correct DKIM setup for the user's account.
Key considerations
- Check TXT Record Value: Verify the TXT record value to identify any appended domain names.
- ESP Configuration: Ensure the email service provider's setup aligns with the DKIM configuration requirements.
Expert view
Expert from Word to the Wise explains that a user should use online tools to check the format of the domain key, however they may also ask their ESP if they are setup correctly for their account.
17 Sep 2024 - Word to the Wise
Expert view
Expert from Spam Resource explains that a non-technical user can verify if their DNS provider is appending the domain name to their DKIM record by first entering their record into the DNS, then using a DNS lookup tool such as those found at SpamResource.com or MXToolbox. This approach allows them to see the value of the TXT record that's actually being published.
18 Oct 2021 - Spam Resource
What the documentation says
5 technical articles
Documentation highlights the importance of understanding DNS provider-specific behavior, especially with GoDaddy automatically appending domains to DKIM records. It recommends using tools like the `dig` command to inspect DNS records or checking the Cloudflare dashboard to see the exact record being served. Understanding DNS record syntax from RFC 1035 and the role of the selector from DKIM.org aids in identifying appending issues.
Key findings
- GoDaddy Auto-Appending: GoDaddy automatically appends the domain to DKIM records.
- dig Command: The `dig` command can show the exact DKIM record being served.
- Cloudflare Dashboard: The Cloudflare dashboard allows checking the TXT records for DKIM to see the actual served record.
- RFC 1035 Syntax: Understanding DNS syntax (RFC 1035) aids in recognizing unintended domain appending.
- DKIM Selector: The DKIM selector's correct format is critical for the email server to find the public key.
Key considerations
- GoDaddy Record Entry: When using GoDaddy, do not include the domain name as part of the DKIM host record.
- dig Output: Copy and share the output from the `dig` command with someone who can interpret it or compare it to the record you entered.
- Cloudflare Login: If using Cloudflare, ensure you're logged in to your Cloudflare dashboard to check DNS settings.
- Fully Qualified Domain: Be aware that domain names are often fully qualified (ending with a dot), which helps recognize unintentionally appended domain names.
- Selector Format: Double-check the format of the selector as defined by DKIM.org.
Technical article
Documentation from Cloudflare explains that if using Cloudflare as your DNS provider, you can log in to your Cloudflare dashboard, navigate to the DNS settings, and check the TXT records for DKIM. The dashboard shows the exact record that Cloudflare is serving, so users can identify if the domain is being appended.
23 Feb 2022 - Cloudflare Help Center
Technical article
Documentation from Google Workspace Admin Help explains that when using GoDaddy, you need to be aware that GoDaddy automatically appends the domain name to DKIM records. Therefore, when entering the DKIM record, ensure you don't include the domain name as part of the host record.
24 Nov 2022 - Google Workspace Admin Help
Are people using 4096-bit DKIM keys, and what is the recommended DKIM key length?
Can DKIM be set up on a subdomain, and which domain should be used for signing?
Do DKIM selectors affect email reputation?
How can I implement a DMARC reject policy for non-existent domains to prevent spam?
How do I find the DKIM selector for my domain in Dmarcian or Hubspot?
How do SPF, DKIM, and DMARC email authentication standards work?
