SPF(not supported) DKIM(recommended)
This article covers the DKIM authentication process for Rave Alert and how it is being managed in Valimail Enforce.
Rave Alert does not support SPF alignment.
TABLE OF CONTENTS
- Configuring DKIM authentication for your Rave Alert emails
- Add a Rave Alert DKIM key in Enforce
- Configuring SPF authentication for your Rave Alert emails
Configuring DKIM authentication for your Rave Alert emails
For Rave Alert to send authenticated emails on your behalf, you must update your domain’s
DNS records to point to the public keys we use to sign messages.
Once you update your DNS records, send a list of your updated email domains to
techsupport@ravemobilesafety.com. Our services team will turn on DKIM for your Rave Alert
instance.
Once enabled for DKIM, Rave Alert signs emails using different domains depending on the
email’s destination.
Rave Alert will sign emails going to internal addresses you control with whichever domain you specify in
the from: field.
Rave Alert will sign emails going to external addresses with your domain’s default
getrave.com email address.
Steps to Setup DKIM in Rave Alert:
1. Publish the below CNAME records on your domain's Configuration page in Enforce by pointing to the public keys Rave uses to sign messages.
Here is an example of the CNAME records you must add:
rave1._domainkey.customer.com -> rave1._domainkey.getrave.com
rave2._domainkey.customer.com -> rave2._domainkey.getrave.com
rave3._domainkey.customer.com -> rave3._domainkey.getrave.com
Note: In Enforce you will only need to add the DKIM selector like presented in the Add a Rave Alert DKIM key in Enforce chapter.
2. Contact techsupport@ravemobilesafety.com with a list of email domains you’ve added our CNAME records to. Rave Alert Support will turn on DKIM for your Rave Alert domain.
Once enabled, Rave Alert will sign all emails.
Rave Alert publishes 3 selectors for DKIM authentication – rave1, rave2, and rave3. They use
one selector at a time to sign their DKIM messages and rotate them periodically.
Please make sure you add all 3 DKIM keys to Valimail Enforce.
Maintaining multiple selectors lets Rave Alert rotate keys, increase key length, and manage other
security best practices seamlessly, without requiring any action from you. Once you set up the
CNAME records, they will take care of the DKIM records validation.
Add a Rave Alert DKIM key in Enforce
1. Go to your domain's Configuration page in Valimail Enforce and publish the newly created DKIM key.
a. Scroll down and add the two DKIM keys in your configuration, by clicking on Add a DKIM key.
b. Enter the selector name, CNAME target value, associate the key/s with Rave Alert and then click Add.
You can find more detailed information on how to add a DKIM key in Valimail Enforce here.
Configuring SPF authentication for your Rave Alert emails
Once you establish that Rave Alert is an authorized sender for your domain, you will need to add the service in your Enabled Senders list in Enforce.
Even though Rave Alert does not support SPF alignment, we advise you to authorize it in your Enabled Senders list.
1. Please go to your domain's Configuration page in Enforce.
2. Click on the + sign from the Enabled Senders section:
3. Choose Rave Alert from the list of configurable senders and then click Enable:
We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.
As always, if you have any questions, please don't hesitate to submit a ticket.