xaf via mailop a écrit le 28/08/2026 à 03:02 : > Benny Pedersen via mailop a écrit le 27/08/2026 à 21:39 : >>> As Rainer suggests, a single DKIM key for all and a CNAME record for >>> each domain is arguably the best solution. >> CNAME breaks DNSSEC > No, that's fine, but DNSSEC must also be enabled on each external target (MX, > CNAME). > The target MX or CNAME domain must be signed to be compatible with all > domains, whether signed or unsigned.
Sorry, the target MX domain should only be signed if you wish to use DANE. xaf _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
