我收到一个DKIM：FAIL,在GMail中出现域null错误.当我在GMail中看到Original时,我得到dkim = fail header.i=@example.com;.
在我的DNS中,我有以下TXT记录：
DMARC TXT条目：_dmarc v = DMARC1; p =拒绝; sp =拒绝; rf = afrf; pct = 100; ruf = mailto：authfail@example.com; rua = mailto：mailreport@example.com; ri = 86400
SPF TXT条目：example.com
v=spf1 +a +mx +ip4:70.xxx.xxx.xxx +ip4:71.xxx.xxx.xxx +ip4:72.xxx.xxx.xxx ~all
DKIM TXT条目：_default._domainkey
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/HYr74H9Ty6HjTpjawYIfiDa7kOPx+0GJiw4rw7IYkfvrfrLojmGLuS4lg3NbIqYmLg9Ziz77q9vVT15ftrFB1+lTz6+Ei19b6AM8FGCJoDWRHRwB+YN0InJaFs/kPfy1SktqQI8TntPNfH2+tTOUrIT1gi8fjwSnfSkUsbNuSpIp3XrAU6pYzEjXF2h1A3UMFV+7+jLRzEvunj2YCsJ3vaifTihat+Nsw7eP5L2iAzW8b0joP3z6k/UkhUa7/35oNC4Xn1dY532irsBunMJz9QsBxIaNpepiZZkTxfglsq2RP4FWGZbiVFRDDcvsnpi4kFx3eAQtAoo+szLA70FQIDAQAB
我通过https://www.mail-tester.com/spf-dkim-check和http://dkimcore.org/tools/keycheck.html测试了我的记录,然后全部结账.公钥是2048位.我读到GMail用较小的键失败DKIM.
我还用http://unlocktheinbox.com进行了测试,并在DKIM验证检查中说：
Signature Found: Yes SmarterMail DKIM Test: Failed - Bad Signature MailBee.NET DKIM Test: Failed - SignatureInvalid
GMail似乎与我的SPF和DMARC没有任何问题.以下是这些的身份验证结果：
spf=pass (google.com: domain of sender@example.com designates 70.xxx.xxx.xxx as permitted sender) smtp.mailfrom=sender@example.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=example.com
我的电子邮件是从http://inmotionhosting.com托管/发送的.我的DNS在CloudFlare.
我在这里做错了什么或错过了什么？
谢谢！
解决方法
检查标题中的DKIM签名.诊断消息似乎表明域字段(d =)为空或缺失.确保在签署电子邮件时提供域名. DKIM标题应如下所示：
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=example.com; s=201602; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Date:Message-ID:Subject:From:To;
bh=GUIz2zzhMS1zh+o3BSEHOEq5KPzYRRlG+wqnc7+1vNM=; b=Q0LXbOPly2f1Ns6kpuS5e6dykT
mefOZ8WX5tzNR0jD4Mqttg9IDutAE25M3FR+1UXcnakHCIsj+ELuoqafHvu/1av6vvAhZXMudoo/V
wz3FDWwUnOroIaDPLvSR9RgBA/SHpPL9REEpCtN5WDnWDQK4P69CygrX+zbyh60aZVhE=;
