DKIM TXT Propagation w/ Screenshots

Hi all -

I’ve run across an odd issue with DKIM records NOT propagating. Please see below:

Generation of DKIM record

Adding TXT record to Cloudflare

Screenshot

Verifying TXT record via DIG

Screenshot

The TXT record does not show up. I’ve tried smaller key size, non-custom ._domainkey. Pretty much everything. Anyone have an idea?

Since the TXT record name is ddos.ms._domainkey, it’ll be on your domain at ddos.ms._domainkey.ddos.ms.

$ dig TXT ddos.ms._domainkey.ddos.ms

;; ANSWER SECTION:
ddos.ms._domainkey.ddos.ms. 0   IN      TXT     "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktMy3cUkmFzOtBIXacIyFBb5bf6osAWPSebemyisbQS3GzlcQ5mi20NmcC9D4KoXSfhxmHUv0J/xT0J+IlxGeTIrdLshBjmns2KXFf+OREXMv9yFSJJJn2T4U5ikwS4S7wAee5p5Qb4U73v8mT6c18w9OEHu/REKuJw/TReyZ3HjhTXFDxg9aaP+m4cdj4YZY" "1osDNSK+OPn1QvrIand9Ok9Own3G/nv+/zWys9s/8S2Ogh38gUvXTXg1tCeSOU7y38WSbuvqBtRqgirnHry5JQOgmES0630HAW5eHwxzG6nklgZBT8piOi8897wiS6tOfhnVI4UsjRfCiaoF2UzEwIDAQAB"

@Judge That is extremely helpful. Thank you. Am I missing something in the DKIM standard? Why is this the case/format?

That’s a DNS record in your domain. Any DNS record in your domain will end with your domain name in a lookup.

So you can have a DNS record that looks like itsy.bitsy.spider, but your domain name really is on the end (itsy.bitsy.spider.example.com), even if it doesn’t show up on the DNS screen. Otherwise, it won’t be assigned to your domain.

1 Like

Ah, that makes sense. Appreciate the assistance.

1 Like

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.