You are here:
Support for DomainKeys Identified Mail (DKIM) Authentication
Salesforce B2C Commerce provides an out-of-the-box solution on our first-party Point of Deployment (POD) that customers can use for their email requirements. This service provides support for DKIM and SPF authentication. DKIM is an email authentication protocol that adds a cryptographic digital signature to outgoing emails. With DKIM, receivers can verify that the domain owner authorized the email and that it wasn’t altered in transit. DKIM helps reduce spam and phishing emails.
Which Salesforce Commerce Product Do I Have?
DKIM Authentication Requirements for Google, Yahoo, and Microsoft
- Google announced that, starting in 2024, it requires both Sender Policy Framework (SPF) and DKIM for users who send 5,000+ emails per day. See Email sender guidelines.
- Yahoo announced similar plans for Q1 2024. See More Secure, Less Spam Enforcing Email Standards for a Better Experience.
- Likewise, Microsoft announced authentication requirements with DKIM, DMARC, and SPF for bulk senders. See Strengthening Email Ecosystem: Outlook’s New Requirements for High‐Volume Senders.
To ensure compliance with the bulk sender authentication requirements, here are the high-level steps.
- Generate a private-public key pair for DKIM. See Generate a Private-Public Key Pair
- To reflect the new public key, update your DNS records. See Configure DKIM for B2C Commerce.
- Import your private key in Business Manager. See Configure DKIM for B2C Commerce.
- The key is used for all of your outgoing emails, and it satisfies Google, Yahoo, and Microsoft requirements.
- Specifying your key is required only one time per instance.
- Test your changes in your development or staging instance before introducing them to production.
In this section:
- Configure DKIM for B2C Commerce
Major email providers, including Google, Microsoft, and Yahoo, now require DomainKeys Identified Mail (DKIM) authentication. Configuring DKIM is essential to ensure that your emails reach customer inboxes and aren’t rejected or flagged as spam. Configure DKIM to verify that the emails come from the domain that they claim to be from. - Generate a Private-Public Key Pair
DKIM authentication requires you to specify a private key in Business Manager in B2C Commerce. Generate a private key in a terminal with these commands.
Did this article solve your issue?
Let us know so we can improve!
