Loading...
Loading...
Check DKIM selectors and email signing configuration for proton.me. Verify that outgoing emails are cryptographically signed.
DKIM (DomainKeys Identified Mail) is an email authentication protocol that allows a domain to sign outgoing emails with a cryptographic signature. When proton.me sends an email, the mail server attaches a DKIM signature in the email header. The receiving server then looks up the DKIM public key in the DNS records of proton.me (specifically at selector._domainkey.proton.me) and uses it to verify the signature. If the signature matches, the email is confirmed as authentic and unaltered.
Without DKIM, emails from proton.me are more likely to be flagged as spam or rejected entirely. DKIM provides three key benefits: it proves the email genuinely came from proton.me(authentication), it proves the message was not tampered with during delivery (integrity), and it improves email deliverability by building sender reputation. DKIM also works together with SPF and DMARC to provide a complete email authentication framework — without all three,proton.me is vulnerable to spoofing and phishing attacks.
DKIM configuration for proton.me depends on which selectors are published in DNS. Check the live results above to see which DKIM selectors were found for proton.me, along with their public key details and configuration status.
DKIM selectors vary by email provider. Common selectors include "google" (Google Workspace), "selector1"/"selector2" (Microsoft 365), "k1" (Mailchimp), and "default". The live lookup above scans common selectors for proton.me to show which ones are active.
DKIM (DomainKeys Identified Mail) is an email authentication method that uses cryptographic signatures to verify that an email was actually sent by the domain it claims to be from — and that the message was not altered in transit. The sending server signs each email with a private key, and receivers verify the signature using the public key published in DNS. DKIM is essential for email deliverability and works alongside SPF and DMARC to prevent spoofing.