Making Email More Secure: Understanding DKIM and SPF

Imagine you’re sending an important letter to a friend. You write your message, put it in an envelope, and drop it in the mailbox with your address (From Address) and your friend's address (To Address). But what if someone along the way tampers with your letter, changes the contents, or even forges a letter pretending to be you? Your friend might receive a completely different message, or worse, never get it at all.

This is exactly the kind of problem businesses face with email security. Just like traditional letters, emails can be intercepted, modified, or forged. To protect email communication, organizations use two important security measures: DKIM (DomainKeys Identified Mail) and SPF (Sender Policy Framework).

Zylker Techfix encountered a major issue without these security measures : customers weren’t receiving support emails. Some emails bounced back, while others landed in spam folders. Without DKIM and SPF, email providers couldn’t verify whether Zylker’s emails were genuine or forged.

Understanding DKIM

Like official letters have signatures or company seals to prove authenticity, DKIM (DomainKeys Identified Mail) does the same for emails.

DKIM : The Signature Seal for Emails

• DKIM attaches a cryptographic signature to every email you send.
  
• When the recipient’s email service (like Gmail, Outlook, or Yahoo) gets the email, it checks this signature against your company’s domain records.
• If the signature matches, the email is verified as authentic and delivered safely.
• If the signature is missing or doesn’t match, the email might get rejected or marked as spam.
  

Adapting Custom SMTP for Public Domains

Using email forwarding and two-factor authentication, Zylker Techfix used public domains like Microsoft and Google with Zoho SMTP. Configuring DKIM was not the solution in this case; instead, the Custom SMTP setup within Zoho Desk resolved the issue. To further enhance security, they could enable Custom SMTP OAuth for a passwordless configuration.

Why did Zylker Techfix Implement DKIM?

Zylker Techfix used organization-level email addresses from a domain procured through their official website. These addresses were used by different departments. However, they faced email bounces due to authentication failures when sending messages via Zoho’s servers. This disrupted their customer support services, as bounced emails prevented ticket creation.

To resolve this, they enabled DKIM authentication in Zoho Desk. The setup was simple:

1. Added the DKIM public key as a TXT record in their DNS settings.
2. Verified the key using the "Verify" option in Zoho Desk.
3. Ensured all outgoing emails carried the DKIM signature to authenticate email communications.

By enabling DKIM, Zylker Techfix significantly improved email deliverability, reduced email tampering, and prevented spoofing.

Understanding SPF

Now imagine you’re sending the package to your friend through a trusted courier service like FedEx or UPS. If someone tries to deliver a fake package using their branding, the courier service will refuse to accept it.

SPF (Sender Policy Framework) works in the same way—it ensures that only authorized mail servers can send emails on behalf of your domain.

SPF: The "Authorized Courier"

• SPF acts as a list of trusted email servers that are allowed to send emails from your domain.
• When an email is received, the recipient's email provider checks whether it came from an authorized server.
• If the email comes from a trusted source, it is delivered; else it is rejected or marked as spam.

How did Zylker Techfix implement SPF?

Set up SPF by specifying specified email services as their authorized email senders.

To improve security, Zylker Techfix set up SPF records to tell email providers:

"Only emails sent from Authorized email servers should be considered legitimate. If an email comes from another server, don’t trust it!"

The Benefits

Setting up SPF prevented spam, fraudulent emails, and email spoofing while ensuring better email deliverability. 

After implementing DKIM and SPF, email deliverability improved, customers received emails without issues, and communication became more secure and professional.

Final Thoughts for Every Business

Whether you’re a small startup or a large enterprise, email security matters. Without DKIM and SPF, your business risks lost emails, email spoofing or tampered messages. 

Enable DKIM and SPF today!

• Topic Participants

• Lydia | Zoho Desk

  

• Sticky Posts

• Register for Zoho Desk Beta Community

  With the start of the year, we have decided to take a small step in making the life of our customers a little easier. We now have easy access to all our upcoming features and a faster way to request for beta access. We open betas for some of our features

• Share your Zoho Desk story with us!

  Tell us how you use Zoho Desk for your business and inspire others with your story. Be it a simple workflow rule that helps you navigate complex processes or a macro that saves your team a lot of time; share it here and help the community learn and grow with shared knowledge. 

• Tip #1: Learn to pick the right channels

  Mail, live chat, telephony, social media, web forms—there are so many support channels out there. Trying to pick the right channels to offer your customers can get pretty confusing. Emails are most useful when the customer wants to put things on record. However, escalated or complicated issues should not be resolved over email because it's slow and impersonal.  When you need immediate responses, live chat is more suitable. It's also quick and convenient, so it's the go-to channel for small issues. 

• Welcome to Zoho Desk Community - Say hello here!

  Hello everyone! Though we have been here for a while, it’s time to formally establish the Zoho Desk Community; we’re really happy to have you all here! This can be the place where you take a moment to introduce yourself to the rest of the community. We’d love to hear all about you, what you do, what company or industry you work for, how you use Zoho Desk and anything else that you will like to share! Here’s a little about me. I am Chinmayee. I have been associated with Zoho since 2014. I joined here

• Webinar 1: Blueprint for Customer Service

  With the launch of a host of new features in Zoho Desk, we thought it’ll be great to have a few webinars to help our customers make the most of them. We’re starting off with our most talked about feature, Blueprint in Zoho Desk. You can register for the Blueprint webinar here: The webinar will be delivered by our in-house product experts. This is a good opportunity to ask questions to our experts and understand how Blueprint can help you automate your service processes. We look forward to seeing

• Recent Topics

• ENTER key triggering Submit

  Is it possible to stopped the ENTER key from the mandatory triggering of the Submit button on Creator form? I want forms submitted "ONLY" when the Submit button is pressed. 

• Paste issues in ZOHO crm notes

  Hi, since a week or so I have issues with the paste function in ZOHO CRM. I use "notes" to copy paste texts from Outlook emails and since a week or so, the pasting doesnt function as it should: some text just disappears and it gives a lot of empty lines/enters.....

• Insert Cookie Policy in Zoho Sites

  Hello, i need to insert a banner on my site because i'm in Italy so i have to respect EU laws for Cookie Policy and Privacy Policy. I see that i need to insert a code in <head> section of my site to show a banner/popup with cookie info. How i can do this? Thank you Luca

• Billing Preferences per Account

  Hello, We are trying to setup Billing Preferences in Zoho Desk to set up a different pricing per account. We charge different pricing per hour per customer/account. Account A = 100 per hour Account B = 125 per hour In the Billing Preferences in Time Entry

• Time entry preview for custom time entry templates.

  Our company needed time entries in a specific format to document our client interactions. Since we are using a custom time entry layout, we have lost the "preview" on the time entry tab. Using the default time entry layout, you get a small preview of

• Send Whatsapp message from Whatsapp template with custom variables

  Hi, I'm trying to do some basic integration for sending WhatsApp messages from Zoho CRM using Zoho Desk whatsapp templates. When creating new whatsapp template in Zoho Desk we can choose ticket related fields as variables but it's not clear how to use

• Set to Review for all

  We are testing the use of Writer as part of an internal review process for statement of work documents and have found that when the document is changed from Compose to Review by one person, that is not reflected for all others who view the document. Is

• How to copy value from a single line field into a picklist field within a module's subform?

  Hello there, I have a single line field in a module's subform. I would like the value in the field to automatically update a picklist field within the same subform (both have items with the same names). Is this possible via function? Unfortunately, workflows

• Implementing a Self-Invoicing/Vendor Portal in Zoho Creator

  Hello Zoho Community / Creator Experts, We would like to build a Self-Invoicing Portal (Vendor Portal) in Zoho Creator for our external contractors. Our goal is to allow approved contractors to log in, submit their invoice details (hours worked, project

• Link to images

  I have added images in pages. I would like to link those images with linked in URL so that they open in new window. There is an option of image -> link but I am not able to use the same to open URL in new window. Please check the attached image. Can you

• Categorise Attachments

  We take ID, proof of address, right to work documentation and more.  I can upload a single file in to field, but we often receive multiple files for each category e.g. someone may send a separate file for the front and back of their national ID card.  My team don't have time to manipulate the files in order to upload them as a single file. The options, as far as I can tell, would be to create additional fields on attachments in order to categorise what the file is, or to be able to upload single

• Canvas View - Print

  What is the best way to accomplish a print to PDF of the canvas view?

• Blocked Email

  We are a Zoho One subscriber and use Yahoo as our MX provider. A few times each year, for the past four years, CRM blocks one or more of my Zoho One users from receiving internal email from CRM. This includes "@mentions" in all modules, and emails from

• Able to change project on timelog entries

  Ability to move the timesheet entry from one project to another. When a user adds a wrong entry a manager can change/update the timesheet entry to the correct project.

• What formula to use in computing total hrs and decimal hrss

  So , my data includes log im column , 2 breaks with 2 columns that says back and lunch and 1 column that says back and logged out. What formula should i use to be able to automatically have my total hours as I input time in each column? Thankyou

• i cannot use <b></b> to bold the message in Creator C6!!!!???What?

  Dear experts and friends, Now Creator 6 blocking us from using <b></b> Anyone facing this issue? I faced it on Creator C6 Previously, it used to work. Now failed to work. Faint~ Seek guidance from everyone on how to bold the message. The super simple

• Knowledge base: The nitty-gritty of SEO tags

  A well-optimized knowledge base with great SEO can benefit your company by allowing customers to find help articles and support resources using search engines. This enables customers to quickly and efficiently find the information they need without direct

• Content Security Policy

  Is there a place in ZOHO CRM to add a Content Security Policy to allow for a call to a google.com map, from inside our current app? Or, how do I resolve the issue below?? jquery.js:1 Refused to load the script 'https://maps.google.com/maps/api/js?v=3.41&libraries=places&sensor=true&key=AIzaSyAyQzKeKSbLci4LwZhn9oXvtCkbUo1Ae4g&callback=map_loader'

• Option to select location?

  As a business coach, I meet with clients at various public locations. I have two or three pre-determined locations that I meet at. I would like the client to choose the location when booking an appointment. Is there a way to do that with a single service, or is the best way to accomplish this by creating one service for each location offered?

• Retainer invoice in Zoho Finance modlue

  Hello, Is there a way of creating retainer invoices in the Zoho Finance module? If not can I request this is considered for future updates please.

• Unified WhatsApp Number Management in Zoho Desk and SalesIQ

  Dear Zoho Desk Support Team, We are currently utilizing both Zoho Desk and Zoho SalesIQ for our customer support operations. While both platforms offer WhatsApp integration, we are facing challenges due to the requirement of separate WhatsApp numbers

• Provide a standard structure to your content using article templates

  Hello everyone, When multiple writers work on different documents, maintaining a standard structure can be challenging as each of the writer follows a different writing style. However, when the structure, tone, and format of every document is different,

• How to update custom multi-user field in Zoho Projects?

  I'm trying to update custom multi-user fields in Zoho Projects via a Deluge function in CRM. The code I have so far is below. It works for updating standard project fields and single-line custom fields, but it does not work to update multi-user fields.

• Accessibility Spotlight Series - 1

  Every user interacts with products differently, what feels intuitive to one may be challenging for another. Addressing this, accessibility is built into Zoho Project's design philosophy. This helps users navigate and perform actions with ease irrespective

• Projects Tasks Not Showing Dependencies

  I'm clicking on tasks and the popup to add dependencies isn't showing. I can't disconnect the nodes either. For some reason when I slide a task backwards it says it cannot go before a predecessor, even though there is not predecessor. Double clicking

• Deprecation of C4 endpoint URLs

  Note: This post is only for users who are still using the C4 endpoints. Hello everyone, At Zoho Creator, we're committed to continuously enhancing the security, performance, and capabilities of our platform. As part of this ongoing effort, we'll be deprecating

• Introducing AWS authentication for connections in Deluge

  Hello everyone, We're incredibly excited to announce the all-new AWS authentication for connections in Deluge! This highly anticipated feature simplifies connecting to Amazon Web Services, opening up a world of possibilities and allowing you to seamlessly

• Timeline Tracking Support for records updates via module import and bulk write api

  Note: This update is currently available in Early Access and will soon be rolled out across all data centers (DCs) and for all editions of Zoho CRM. The update will be available to all users within your organization, regardless of their profiles or roles.

• Bug Report and Suggestions for Improvement in Zoho Applications

  Hi Zoho Team, I’d like to report a few bugs and improvement suggestions I’ve noticed while using Zoho products: Zoho Cliq Video Call: The camera sometimes turns off automatically during video calls. This seems to be a bug — please check and fix it. Zoho

• Customize User Invites with Invitation Templates

  Invitation Templates help streamline the invitation process by allowing users to create customized email formats instead of sending a one-size-fits-all email. Different invitation templates can be created for portal users and client users to align with

• Zoho CRM Workflow and Function Backup Options

  Hi everyone! I have been able to make several backups of my CRM data and noticed that the Workflows and Functions are not included in these backups. To my knowledge, there is no backup feature for workflows and functions, which is problematic in of itself.

• ListObjects is recognized by VBA

  Sub addNewRow() Dim ws As Worksheet ' Set your worksheet name Set ws = ThisWorkbook.Sheets("Invoice") ' Set your table name (change "Table1" to your actual table name) ws.ListObjects("InvItems").ListRows.Add End Sub I am getting Unknown function: Li

• KPI Widget dashboard select periods

  I have a problem with selecting periods as a user filter. In the beste scenario I would like to have to have a period filter like Google Analytics has of Datastudio (see attachment). In the KPI widget I "Group by "inquiry_date" on week&Year". It selects

• Need a way to secure Prefill URLs in Zoho Forms (hide or encrypt prefilled values)

  Hi everyone, I often use Zoho Forms with prefilled URLs to simplify the user experience — for example: https://forms.zohopublic.com/.../form?Name=David&Amount=300 However, the problem is that all prefilled values are visible and editable in the link.

• Can’t send emails from Zoho CRM after adding a new user — verification codes not received

  Hi everyone, We recently added a new user to our Zoho CRM account and purchased an additional license. Since then, we haven’t been able to send any emails from Zoho CRM. Our Zoho Mail accounts are working perfectly, we can send and receive emails directly

• Can I add Conditional merge tags on my Templates?

  Hi I was wondering if I can use Conditional Mail Merge tags inside my Email templates/Quotes etc within the CRM? In spanish and in our business we use gender and academic degree salutations , ie: Dr., Dra., Sr., Srta., so the beginning of an email / letter

• CRM for email in Outlook: how to ignore addresses?

  We’re using the "Zoho CRM for email" add-in for Outlook. When opening an email, the add-in displays all email addresses from the message and allows me to add them to the CRM or shows if they’re already contacts. However, sometimes people listed in To

• Scheduling Calls in CommandCenter / Blueprints

  I would love it if you could add a function to schedule a call in the lead's record for a future date. I know you can add a Task by going to Instant Actions > Task and completing the form: These tasks go into the lead's record under Open Actions. But

• Workflow Creation with Zia gets stuck

  It gets stuck here:

• Quickly send emails and sync conversations with custom email addresses in CRM

  Editions: All editions DCs: All DCs Release plan: This enhancement has been released for customers in all DCs except IN and US. We will be enabling it for IN and US DC customers soon. [Update on 22 May 2024] This enhancement has been released for all

• Next Page