1

Topic: DomainKeys question - Must I make new key for subdomain?

Zhang, I have DKIM key set up for mydomain.com.

I must generate new key for dev.mydomain.com, or is covered by the key for mydomain.com? Thanks!

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: DomainKeys question - Must I make new key for subdomain?

You can cover it with one key. For example:

# You already have DKIM key for mydomain.com
dkim_key('mydomain.com', 'dkim',       '/var/db/dkim/mydomain.com.pem');

# Cover your subdomains in @dkim_signature_options_bysender_maps= ():
@dkim_signature_options_bysender_maps = ( {
    ...[OMIT OTHER SETTINGS HERE]...

    # Cover subdomain "dev.mydomain.com".
    'dev.mydomain.com'                => { d => 'mydomain.com' },

    # OR, cover ALL subdomains with one key.
    '.mydomain.com'                => { d => 'mydomain.com' },
});

Restarting Amavisd service is required.

3

Re: DomainKeys question - Must I make new key for subdomain?

and I must add another txt file in DNS zone for the subdomain? or the original will work?

4

Re: DomainKeys question - Must I make new key for subdomain?

I.e.

dkim._domainkey     v=DKIM1; p=MYDOMAIN.KEY
dkim._domainkey.dev v=DKIM1; p=MYDOMAIN.KEY

Where mydomain.key is the same for both

5

Re: DomainKeys question - Must I make new key for subdomain?

sam-the-man wrote:

and I must add another txt file in DNS zone for the subdomain? or the original will work?

No need to add one more TXT record in your DNS server, because we just use the old DKIM record.