Your DKIM signature is not valid

[sjoerd]

What is the name of the domain?

eletrototaalservicenl

What is the error number?

Your DKIM signature is not valid

What is the issue you’re encountering

Your DKIM signature is not valid

What steps have you taken to resolve the issue?

Changing back DNS servers to the Hosting provider.

What feature, service or problem is this related to?

DNS records

What are the steps to reproduce the issue?

When using Cloudflare as DNS, my DKIM gives and error: Your DKIM signature is not valid. When switching back to the hosting provider my DKIM works. With exactly the same DNS records and DKIM key.

Screenshot of the error

[sjoerd]

Below are the results when using the hosting provider as DNS

[sjr]

What is the DKIM selector you are using? ([selector]._domainkey.elektrototaalservice.nl).

[DarkDeviL]

The DNSSEC configuration on your domain registrar, New Yard Burg (via mijn.host), is incorrect:

Edge Certificates (pending validation Txt) 24hr+

At the domain registrar for the domain anos.cloud, Porkbun, you have DNSSEC enabled, and as such DNS resolvers across the world expect that your domain’s DNS data also holds cryptographic DNSSEC signatures, and that they will validate according to the DS record set that has been set from the domain registrar. However, within Cloudflare, you do not currently have DNSSEC enabled, and as such, Cloudflare is obviously not adding any cryptographic signatures to your domain’s DNS data, and therefore,…

1. Enable DNSSEC in Cloudflare

2. Change name servers AND update the DNSSEC material, so it matches the material provided by Cloudflare, through your registrar.

3. Wait for the DNS propagation to succeed.

Without #1 and the part of #2, with updating the DNSSEC material, your DNS will fail on DNS resolvers that validate DNSSEC, when you change name servers, because DNSSEC will no longer match.

[sjoerd]

The selector is x._domainkey