Google Apps电子邮件DKIM不会进行身份validation

我们正在尝试在Google Apps / G Suite for Business域上设置DKIM身份validation,以减less以垃圾邮件文件夹结尾的电子邮件数量。 我们已经生成了DKIM密钥,并在Google Cloud DNS中进行设置,并确认使用3种不同的DKIM工具进行设置:

  1. 邮件检查
  2. MX工具箱
  3. DKIM核心

他们都说这是有效的,但是当我们尝试开始validation时,它说“电子邮件validation未validation…”我们等待了build议的48小时(尽pipeDNSlogging在24小时前是可见的和正确的),它仍然将不会进行身份validation。

尝试启动身份验证时的错误屏幕截图

任何想法还有什么可能会出错?

如果你想自己检查DNS,域名是safedoorpm.com

编辑添加电子邮件标题2016/10/21

这是从我们的域发送到Gmail的邮件的标题。 请注意,它仍然使用DKIM的默认gappssmtp域,而不是我们的:

 Delivered-To: [email protected] Received: by 10.79.95.130 with SMTP id t124csp1047440ivb; Thu, 20 Oct 2016 14:30:12 -0700 (PDT) X-Received: by 10.37.231.193 with SMTP id e184mr4430151ybh.13.1476999012850; Thu, 20 Oct 2016 14:30:12 -0700 (PDT) Return-Path: <[email protected]> Received: from mail-yw0-f176.google.com (mail-yw0-f176.google.com. [209.85.161.176]) by mx.google.com with ESMTPS id v62si10092566ybg.141.2016.10.20.14.30.12 for <[email protected]> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Oct 2016 14:30:12 -0700 (PDT) Received-SPF: pass (google.com: domain of [email protected] designates 209.85.161.176 as permitted sender) client-ip=209.85.161.176; Authentication-Results: mx.google.com; dkim=pass [email protected]; spf=pass (google.com: domain of [email protected] designates 209.85.161.176 as permitted sender) [email protected] Received: by mail-yw0-f176.google.com with SMTP id u124so527ywg.3 for <[email protected]>; Thu, 20 Oct 2016 14:30:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=safedoorpm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=rxgZTPk8FeVq2/dWzyjPIHnShPXlQzmPnvfbrUzW/Ss=; b=CJ6/IB1YNKvIsO0sUW8BvWyZZdjTQqBofzgOIbuW3Auo0sWtQB4cgWtzjzltr1SyZO b+eKJGSrdvRaaaLj7240nZwrVtrmTTlXcx2Qvm2yIp20ilDZWd4pJAAlvSC8wCxDQhYY 1zwn9UcXxuwD2c05El/DSrdJy+mwVlNv4w3D2v+hPSO0CKS7rKYsjFLEJcQrlAjjANnJ itn3oz6DxasplOSmSX8tIOXSHFNnYaJM5lbUtm9cLOWvffclmeShcTbhu/BWWdg1pFHn 6dXvj6tX7KvbPr9GzH6LnVd71IHe/R65/2VQdqdT0uvJn5KWkc0ziHRlm3HV8JiWXGZf oyRQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=rxgZTPk8FeVq2/dWzyjPIHnShPXlQzmPnvfbrUzW/Ss=; b=IcWYvLXbpDB2CCV40fWymGcvbICsjuJipBhW5d1d9WFAM4jVDsZd+2K5ENwvVM4L20 DDbYoqPIoNBwFIaqIB3Sx30xVgFb7d4k7SVSfRZJctrY6QQyO/k6KaxL6++AAxHPbcNw jls+G5kzs+62OGQzq6w2Z9VNp6CSEyKqqORsAAjEdwa89v8VLLwyRdUoDxZvpiLAFZ8K riyjP7ebj5iyKJsuviX24kQ6QEJZh6RAAhILudAw8+vtNM3Ml+UUHOlAqbPPgseUB4qx 9hSv+9uQA8w2v7sDiNVVCOoJa20bXZTsLmqlJB6yC4Bt2kzIeSpg5GcALx8EfuaGBiCu qo+w== X-Gm-Message-State: AA6/9RmpTg+BzD0kFfXdFBfUIsAcwb0VxlByb8FBWzHYz/gJotrTZ42AzZtIqsANt5a7rf/hu9In1wdErNHioA== X-Received: by 10.202.53.68 with SMTP id c65mr8679383oia.57.1476999012386; Thu, 20 Oct 2016 14:30:12 -0700 (PDT) MIME-Version: 1.0 Received: by 10.202.207.5 with HTTP; Thu, 20 Oct 2016 14:29:31 -0700 (PDT) From: Mike Totman <[email protected]> Date: Thu, 20 Oct 2016 15:29:31 -0600 Message-ID: <CAGsv74XyfTOqi7eJ4cCD90Dx8VPvFB1NFLujtCvKgDaCOCT0vQ@mail.gmail.com> Subject: DKIM test 10 To: Mike Totman <[email protected]> Content-Type: multipart/alternative; boundary=001a113d4f2877afad053f52a17e 

编辑添加从DKIMValidator.com 2016/10/21输出

我也尝试发送电子邮件到DKIMValidator.com工具,这是结果。 请注意,它仍然使用DKIM的默认gappssmtp域,而不是我们的:

DKIM信息:

 DKIM Signature Message contains this DKIM Signature: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=safedoorpm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=5wQSTkgMlB+S2PAmekAxIh7O+zBt2H5aC2Ft8cNRJWQ=; b=ItJ0UFj97i19qHEFF9ACB5sQY50iZv9ZJ2J9l4JIgSKkSbd/QOi0OGsRWtMe9p5yU4 vp6z1mgah8DBa+fgCEtTqrOyd+LjaXm0f6FJXyJiV+E7FcdpJ1bSEHyzRlulR0TLqJ/E LK0JDXSFNCSUTrWVsrGxIKo7HscI+jY5CR/nTf9cRvTj9Z22lFeukAvVpuhSz88XQeBX 2TXk2I+p21+L0xAbv0x4OCDgWM5W4WRJUqGi0+gu/IhQBomi/e7wEYZ2f+lvNKRpRggU QD2dv15fCibJ3jufVBglpCx9En94UlPuiZqaCi0qqriLnhV/76iBMajI+WyelCG2SimU Ht6g== Signature Information: v= Version: 1 a= Algorithm: rsa-sha256 c= Method: relaxed/relaxed d= Domain: safedoorpm-com.20150623.gappssmtp.com s= Selector: 20150623 q= Protocol: bh= 5wQSTkgMlB+S2PAmekAxIh7O+zBt2H5aC2Ft8cNRJWQ= h= Signed Headers: mime-version:from:date:message-id:subject:to b= Data: ItJ0UFj97i19qHEFF9ACB5sQY50iZv9ZJ2J9l4JIgSKkSbd/QOi0OGsRWtMe9p5yU4 vp6z1mgah8DBa+fgCEtTqrOyd+LjaXm0f6FJXyJiV+E7FcdpJ1bSEHyzRlulR0TLqJ/E LK0JDXSFNCSUTrWVsrGxIKo7HscI+jY5CR/nTf9cRvTj9Z22lFeukAvVpuhSz88XQeBX 2TXk2I+p21+L0xAbv0x4OCDgWM5W4WRJUqGi0+gu/IhQBomi/e7wEYZ2f+lvNKRpRggU QD2dv15fCibJ3jufVBglpCx9En94UlPuiZqaCi0qqriLnhV/76iBMajI+WyelCG2SimU Ht6g== Public Key DNS Lookup Building DNS Query for 20150623._domainkey.safedoorpm-com.20150623.gappssmtp.com Retrieved this publickey from DNS: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UMfREvlgajdSp3jv1tJ9nLpi/mRYnGyKC3inEQ9a7zqUjLq/yXukgpXs9AEHlvBvioxlgAVCPQQsuc1xp9+KXQGgJ8jTsn5OtKm8u+YBCt6OfvpeCpvt0l9JXMMHBNYV4c0XiPE5RHX2ltI0Av20CfEy+vMecpFtVDg4rMngjLws/ro6qT63S20A4zyVs/V19WW5F2Lulgv+l+EJzz9XummIJHOlU5n5ChcWU3Rw5RVGTtNjTZnFUaNXly3fW0ahKcG5Qc3e0Rhztp57JJQTl3OmHiMR5cHsCnrl1VnBi3kaOoQBYsSuBm+KRhMIw/X9wkLY67VLdkrwlX3xxsp6wIDAQAB Validating Signature result = pass Details: 

最后谈到谷歌支持后,我最终尝试了一个1024位DKIM密钥,而不是2048位密钥。 这工作。

我注意到的一件事是,1024位密钥的DNSlogging是全部一个string,而我不得不将2048位密钥分解成同一logging中的几个string。 我的理论是Googlepipe理控制台无法正确识别,因为我使用的其他工具(问题中的链接)validation了它。