Home/Notes/DKIM: a field note from a driving school

DKIM: a field note from a driving school

5 Aug 2024

How a driving school deals with DKIM — and what usually goes wrong.

Sender outbound email DNS lookup DKIM DKIM a 2 MB photo in a… Mail server driving-school.… Inbox delivered

The problem: a 2 MB photo in a 320-pixel slot. The DKIM check fails for a driving school.

We solved DKIM for a driving school by moving it behind a reverse proxy. The old configuration stayed live as a fallback for forty-eight hours, then we pulled it.

We document DKIM in a shared spreadsheet. It is not glamorous, but a driving school can open it on their phone at midnight if something breaks.

The owner at a driving school asked why DKIM matters. We showed them the error page their customers see when it breaks. That ended the conversation.

A friend of the owner at a driving school had set up DKIM years ago. When we audited, the config still pointed at a server they stopped paying for in 2024.

We do not start with a platform when handling DKIM. We write down who types what, who gets the mail, and what must not get lost. That list is always shorter than a vendor pitch deck.

We moved DKIM for a driving school to a provider that supports DNSSEC. It added five minutes to the migration and closed a class of attacks they did not even know about.

After fixing DKIM, we added a monitoring alert. If the record changes or the certificate approaches expiry, both we and a driving school get an email. No surprises.

More notes

Related notes

Tell us what you need.

Write a few lines about your project. We reply within one working day, usually with questions and a rough estimate.

hello@digitalserved.com