Skip to content

Glossary: Logs and Data Sources for Investigations

DKIM (DomainKeys Identified Mail)

Also written: DKIM

An email check in which the sending domain signs each message with a cryptographic key, so receiving servers can verify the domain and see that the message wasn't altered. Its result is recorded in the Authentication-Results header.

Where the book teaches it

Related terms

SPF (Sender Policy Framework)DMARCAuthentication-ResultsSpoofing