SPF(not supported) DKIM(recommended)
This article covers the DKIM authentication process for Rave Alert and how it is being managed in Valimail Enforce.
Rave Alert does not support SPF alignment.
TABLE OF CONTENTS
- Configuring DKIM authentication for your Rave Alert emails
- Add a Rave Alert DKIM key in Enforce
- Configuring SPF authentication for your Rave Alert emails
Configuring DKIM authentication for your Rave Alert emails
For Rave Alert to send authenticated emails on your behalf, you must update your domain’s
DNS records to point to the public keys we use to sign messages.
Once you update your DNS records, send a list of your updated email domains to
email@example.com. Our services team will turn on DKIM for your Rave Alert
Once enabled for DKIM, Rave Alert signs emails using different domains depending on the
Rave Alert will sign emails going to internal addresses you control with whichever domain you specify in
the from: field.
Rave Alert will sign emails going to external addresses with your domain’s default
getrave.com email address.
Steps to Setup DKIM in Rave Alert:
1. Publish the below CNAME records on your domain's Configuration page in Enforce by pointing to the public keys Rave uses to sign messages.
Here is an example of the CNAME records you must add:
rave1._domainkey.customer.com -> rave1._domainkey.getrave.com
rave2._domainkey.customer.com -> rave2._domainkey.getrave.com
rave3._domainkey.customer.com -> rave3._domainkey.getrave.com
Note: In Enforce you will only need to add the DKIM selector like presented in the Add a Rave Alert DKIM key in Enforce chapter.
2. Contact firstname.lastname@example.org with a list of email domains you’ve added our CNAME records to. Rave Alert Support will turn on DKIM for your Rave Alert domain.
Once enabled, Rave Alert will sign all emails.
Rave Alert publishes 3 selectors for DKIM authentication – rave1, rave2, and rave3. They use
one selector at a time to sign their DKIM messages and rotate them periodically.
Please make sure you add all 3 DKIM keys to Valimail Enforce.
Maintaining multiple selectors lets Rave Alert rotate keys, increase key length, and manage other
security best practices seamlessly, without requiring any action from you. Once you set up the
CNAME records, they will take care of the DKIM records validation.
Add a Rave Alert DKIM key in Enforce
Configuring SPF authentication for your Rave Alert emails
We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.