domain-name-system – 在GMail中使用域null的DKIM FAIL

我收到一个DKIM：FAIL,在GMail中出现域null错误.当我在GMail中看到Original时,我得到dkim = fail header.i=@example.com;.

在我的DNS中,我有以下TXT记录：

Dmarc TXT条目：_dmarc v = Dmarc1; p =拒绝; sp =拒绝; rf = afrf; pct = 100; ruf = mailto：[e-mail]; rua = mailto：[e-mail]; ri = 86400

SPF TXT条目：example.com

v=spf1 +a +mx +ip4:70.xxx.xxx.xxx +ip4:71.xxx.xxx.xxx +ip4:72.xxx.xxx.xxx ~all

DKIM TXT条目：_default._domainkey

v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/HYr74H9Ty6HjTpjawYIfiDa7kOPx+0GJiw4rw7IYkfvrfrLojmgluS4lg3NbIqYmLg9Ziz77q9vVT15ftrFB1+lTz6+Ei19b6AM8FGCJoDWRHRwB+YN0InJaFs/kPfy1SktqQI8TntPNfH2+tTOUrIT1gi8fjwSnfSkUsbNuSpIp3XrAU6pYzEjXF2h1A3UMFV+7+jLRzEvunj2YCsJ3vaifTihat+Nsw7eP5L2iAzW8b0joP3z6k/UkhUa7/35oNC4Xn1dY532irsBunMJz9QsBxIaNpepiZZkTxfglsq2RP4FWGZbiVFRDDcvsnpi4kFx3eAQtAoo+szLA70FQIDAQAB

我通过https://www.mail-tester.com/spf-dkim-check和http://dkimcore.org/tools/keycheck.html测试了我的记录,然后全部结账.公钥是2048位.我读到GMail用较小的键失败DKIM.

我还用http://unlocktheinbox.com进行了测试,并在DKIM验证检查中说：

Signature Found:    Yes
SmarterMail DKIM Test:  Failed - Bad Signature
MailBee.NET DKIM Test:  Failed - SignatureInvalid

GMail似乎与我的SPF和Dmarc没有任何问题.以下是这些的身份验证结果：

spf=pass (google.com: domain of [e-mail] designates 70.xxx.xxx.xxx as permitted sender) smtp.mailfrom=[e-mail];


dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=example.com

我的电子邮件是从http://inmotionhosting.com托管/发送的.我的DNS在CloudFlare.

我在这里做错了什么或错过了什么？

谢谢！

解决方法

检查标题中的DKIM签名.诊断消息似乎表明域字段(d =)为空或缺失.确保在签署电子邮件时提供域名. DKIM标题应如下所示：

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
    d=example.com; s=201602; h=Content-transfer-encoding:Content-Type:
    MIME-Version:Date:Message-ID:Subject:From:To;
    bh=GUIz2zzhMS1zh+o3BSEHOEq5KPzYRRlG+wqnc7+1vNM=; b=Q0LXbOPly2f1Ns6kpuS5e6dykT
    mefOZ8WX5tzNR0jD4Mqttg9IDutAE25M3FR+1UXcnakHCIsj+ELuoqafHvu/1av6vvAhZXMudoo/V
    wz3FDWwUnoroIadplvSR9RgBA/SHpPL9REEpCtN5WDnWDQK4P69CygrX+zbyh60aZVhE=;