DKIM Explained: How Email Proves It's Really You
Anyone can fake your email address, DKIM is how the internet catches them. In this video we break down DKIM (DomainKeys Identified Mail) from scratch, using a simple wax-seal analogy.
You'll learn how your mail server signs messages with a private key, how the public key lives in DNS, and how receiving servers verify the seal in milliseconds. We show a real DKIM-Signature header, a real DNS lookup, and how DKIM teams up with SPF and DMARC to lock down your domain.
What's inside:
0:00 Anyone can fake your From line
0:30 What DKIM actually is
1:15 Public key vs private key
2:00 The 3 players: sender, DNS, receiver
2:30 Signing a message step by step
3:30 Inside the DKIM-Signature header
4:15 Where the public key lives (DNS)
5:00 Verifying the seal
6:00 SPF + DKIM + DMARC
6:45 Real header + real lookup
7:15 Common mistakes that break DKIM
New to email security? Subscribe: we keep it simple. Next up: DMARC explained.