Per domain DKIM signing using OpenDKIM

Why is it interesting?

DKIM is one of the most important authentication mechanism used nowadays to protect your domain's reputation on the Internet. Main email providers are very restrictive against domains not using it.

The principle is easy: every email you send is automatically signed by your server using a private key and receiving servers can check the validity of this signature using a public key available within the DNS zone of your domain.

Thus if the verification fails, it is easier to detect phishing attacks for example.

How will it be integrated?

Modoboa won't sign messages but OpenDKIM will. This software is designed for this purpose and integrates well with Postfix. The installer will be updated to integrate a working setup which will communicate with Modoboa.

What Modoboa will provide is the ability to generate signing key pairs per domain in a easy way:

And a quick way to display the public key to let you configure your DNS zone:

If you need/want/like this feature, it is time to sponsor it ;-)