Home/Notes/DKIM: a field note from a marina

DKIM: a field note from a marina

13 Oct 2025

How a marina deals with DKIM — and what usually goes wrong.

Sender outbound email DNS lookup DKIM DKIM a CAA record that… Mail server marina.com Inbox delivered

The problem: a CAA record that blocks the new CA. The DKIM check fails for a marina.

We do not start with a platform when handling DKIM. We write down who types what, who gets the mail, and what must not get lost. That list is always shorter than a vendor pitch deck.

The registrar dashboard crashed twice while we were fixing DKIM for a marina. We filed a ticket; they replied four days later with a template answer.

We found a CAA record that blocks the new CA during a routine check of DKIM. The site had been leaking referrer data for six weeks before anyone noticed.

Fixing DKIM cost less than the lunch meeting where a marina decided to wait another quarter. Waiting is never free.

If you only touch DKIM once a year, a dashboard is extra risk. Files, a mailbox you read, and a person who still answers will outlast any SaaS control panel.

Before you touch DKIM, take a screenshot of the current state. Half of our emergency calls come from people who cannot remember what was there before the change.

More notes

Related notes

Tell us what you need.

Write a few lines about your project. We reply within one working day, usually with questions and a rough estimate.

hello@digitalserved.com