RFC 4871: DomainKeys Identified Mail (DKIM) Signatures
This RFC has been replaced. Do not implement against it for new work — it was formally obsoleted by RFC 6376.
Current document in this lineage: RFC 6376 — DomainKeys Identified Mail (DKIM) Signatures
In plain English — editorial summary, not part of the RFC
DomainKeys Identified Mail (DKIM) defines a domain-level authentication framework for email using public-key cryptography and key server technology to permit verification of the source and contents of messages by either Mail Transfer Agents (MTAs) or Mail User Agents (MUAs). The ultimate goal of this framework is to permit a signing domain to assert responsibility for a message, thus protecting message signer identity and the integrity of the messages they convey while retaining the functionality of Internet email as it is known today. Protection of email identity may assist in the global control of "spam" and "phishing". [STANDARDS-TRACK]
Document record
- Document ID
- RFC4871
- Published
- May 2007
- Authors
- E. Allman; J. Callas; M. Delany; M. Libbey; J. Fenton; M. Thomas
- Status
- PROPOSED STANDARD
- Stream
- IETF
- Area
- art
- Pages
- 71
- Also known as
- —
Topics
Standards lineage
This document is one revision in a chain of 4 RFCs, each formally replacing the one before it.
- RFC 4870 (2007)
- RFC 4871 (2007)
- RFC 5672 (2009)
- RFC 6376 (2011) ✓
Read the full history of DomainKeys Identified Mail (DKIM) Signatures →
Referenced by
2 later RFCs formally update or obsolete part of this document.
Related documents
Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.
- RFC 4405SMTP Service Extension for Indicating the Responsible Submitter of an E-Mail MessageCurrent
April 2006
- RFC 6651Extensions to DomainKeys Identified Mail (DKIM) for Failure ReportingCurrent
June 2012
- RFC 5068Email Submission Operations: Access and Accountability RequirementsUpdated
November 2007
- RFC 4406Sender ID: Authenticating E-MailCurrent
April 2006
- RFC 6652Sender Policy Framework (SPF) Authentication Failure Reporting Using the Abuse Reporting FormatCurrent
June 2012
- RFC 7208Sender Policy Framework (SPF) for Authorizing Use of Domains in Email, Version 1Updated
April 2014
- RFC 9763Related Certificates for Use in Multiple Authentications within a ProtocolCurrent
June 2025
- RFC 4686Analysis of Threats Motivating DomainKeys Identified Mail (DKIM)Current
September 2006
Also filed under
About this page
The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.
Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.
Data sources · Editorial policy · Report a correction · What is an RFC?