SecuTix sends either technical (transaction ...) emails or "marketing" emails via SAM.
In both cases, reliability of delivery is very important.
Technical measures
Set an SPF entry in your DNS
DKIM – Introduction
SecuTix, acting as software-as-a-service providers (SaaS), allows you to define DomainKeys identified mail (DKIM) for sent emails. This requires coordination with SecuTix to set up the corresponding DNS records.
The example below illustrates this DKIM configuration with the header of an email from a fictive institution "mosamuseum":
The procedure to be followed is:
- SecuTix provides a DKIM public key to the institution "mosamuseum"
- The "mosamuseum" institution publishes this DKIM public key in DNS records
- SecuTix signs all emails sent with the DKIM private key (corresponding to the public key sent to the institution "mosamuseum"). This signature is included in the header of the email.
All systems receiving emails can perform a verification of the authenticity of the issuer by verifying the signature included in the message against who claims to be the issuer ("from" clause of the message). In the example below the two values must match:
- sender@mosamuseum.com -> mosamuseum.com
- DKIM-signature: s = s1024; d =mosamuseum.com -> mosamuseum.com
For further reading, please refer to https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail
DKIM - Description of the initial setup
The customer must create 2 dns records in their zone
stxsel1._domainkey.mosamuseum.com. IN CNAME sel1-mosa._domainkey.dkim.secutix.com.
stxsel2._domainkey.mosamuseum.com. IN CNAME sel2-mosa._domainkey.dkim.secutix.com.
!!! Be careful to change "mosa" by the institution code. If any doubt, please open a support request for confirmation- The customer must open a service support request in order to enable signature of outgoing emails
