How to test which DNS providers append domain to DKIM host for non-technical users?

Summary

Testing for automatic domain appending by DNS providers in DKIM records involves several approaches. GoDaddy is known to automatically append domains, requiring users to avoid manual inclusion. Online DKIM checkers (MXToolbox, DNSQueries.com) and DNS lookup tools (dig, nslookup) display the actual served record, enabling comparison. Domain Connect offers programmatic DNS management. Users can also contact DNS provider support, consult community forums, or leverage ESP assistance. Tools like dig and provider dashboards offer insight. Awareness of DNS syntax (RFC 1035) and DKIM selector function is useful.

Key findings

  • GoDaddy Auto-Appends: GoDaddy automatically appends the domain name to DKIM records.
  • Online DKIM Checkers: Online tools like MXToolbox and DNSQueries.com verify DKIM setup and highlight appending issues.
  • DNS Lookup Tools: `dig` and `nslookup` query DNS and reveal actual served records.
  • Domain Connect: Domain Connect is a standardized, programmatic DNS management solution.
  • Provider Support: DNS provider support assists with configuration and appending issues.

Key considerations

  • Compare Record Values: Visually compare entered vs. served record values to detect appending.
  • Check TXT Records: Verify correct TXT records within DNS settings.
  • Consult Community: Leverage community forums for shared experiences.
  • Check ESP Account: Verify the email service provider (ESP) setup aligns with DKIM configuration requirements.
  • dig Tool Expertise: Copy and paste the output from the `dig` tool and have someone technical check if you don't understand the results.

What email marketers say
12Marketer opinions

Testing whether a DNS provider automatically appends the domain to DKIM records requires understanding provider-specific behaviors and utilizing DNS lookup tools. GoDaddy is a known provider that automatically appends the domain, causing potential issues if users manually add it. Various online DKIM record checkers (e.g., MXToolbox, DNSQueries.com) and DNS lookup tools (e.g., dig, nslookup) can display the actual record value being served, allowing for comparison with the entered value. Alternatively, users can seek direct assistance from the DNS provider's support team or community forums. Domain Connect provides a standardized solution for programmatic DNS record management.

Key opinions

  • GoDaddy Appends Domain: GoDaddy automatically appends the domain name to DKIM records, which requires specific attention during setup.
  • Online DKIM Checkers: Online DKIM record checker tools can verify DKIM record setup and highlight domain appending issues.
  • DNS Lookup Tools: Tools like `dig` and `nslookup` can be used to query DNS records and check raw values to confirm if a domain is being appended.
  • Provider Support: Contacting the DNS provider's support team can provide accurate guidance on DKIM record configuration and domain appending.
  • Domain Connect: Domain Connect offers a standardized, programmatic way to manage DNS records, simplifying setup and reducing errors.

Key considerations

  • Compare Entered vs. Served: Visually compare the entered DKIM record value with the value returned by DNS lookup tools to identify domain appending.
  • Check TXT Records: Ensure you are checking the correct TXT records within your DNS settings, either through the provider's interface or via DNS lookup tools.
  • Consult Community: Leverage community forums and support channels for assistance, as others may have encountered similar issues with specific DNS providers.
  • Monitor DNS Changes: Utilize DNS monitoring tools to alert you to changes in your DNS records.
Marketer view

Email marketer from MXToolbox shares that their online DKIM record checker not only validates the DKIM record but also shows the exact value of the record being fetched from the DNS server. This helps identify if the domain name is being appended automatically.

December 2023 - MXToolbox
Marketer view

Email marketer from Twitter suggests that a user should get help from community forums, as most people have had similar issues and can guide them through the problem.

September 2024 - Twitter
Marketer view

Marketer from Email Geeks shares that GoDaddy can append the domain and cause issues when users manually add their domain name. Most other DNS providers either append automatically or already have the domain name visible, where users only need to add "__dmarc" or "selector.__domainkey".

January 2022 - Email Geeks
Marketer view

Marketer from Email Geeks suggests using the Domain Connect open standard to programmatically add DNS records to a client's domain securely without needing their login details.

December 2024 - Email Geeks
Marketer view

Marketer from Email Geeks recommends Domain Connect as the best option for making sender authentication more accessible and foolproof for the average person.

September 2022 - Email Geeks
Marketer view

Email marketer from SuperUser forum explains that the user should copy and paste the DKIM record shown by a lookup tool and directly compare it to the value they entered. The visual comparison can immediately identify any appended domain names.

January 2022 - SuperUser
Marketer view

Email marketer from Reddit suggests that a non-technical user contact the DNS provider's support team directly. They can check the DKIM record configuration on their end and confirm whether the domain is being automatically appended, providing accurate guidance.

July 2023 - Reddit
Marketer view

Email marketer from Namecheap Support answers question by sharing that their users can contact them to check DKIM records. They can review the configurations and ensure the records are set up accurately to avoid domain appending problems.

April 2022 - Namecheap
Marketer view

Email marketer from Neil Patel Digital shares that online DKIM record checker tools can verify if your DKIM record is correctly set up. These tools can highlight if there are any domain appending issues or other errors in your DKIM configuration.

January 2025 - Neil Patel Digital
Marketer view

Email marketer from Stackoverflow explains to use online DNS lookup tools, such as `dig` or `nslookup` (available on most operating systems), to query the DNS records and see the raw, uninterpreted values. This allows users to see exactly what the DNS server is returning, confirming if a domain is being appended or not.

June 2024 - Stackoverflow
Marketer view

Email marketer from DNS Made Easy explains that the user should look at tools that monitor DNS records and alert you to changes. If they see a new record, or a TXT record that has an unrequested value, it can trigger an alert.

June 2022 - DNS Made Easy
Marketer view

Email marketer from DNSQueries.com recommends using the detailed DNS lookup tool on their website. It retrieves and displays all DNS records, including TXT records, and provides additional diagnostic information which simplifies troubleshooting.

October 2024 - DNSQueries.com

What the experts say
2Expert opinions

Experts advise non-technical users to check for domain appending in DKIM records using online DNS lookup tools (e.g., SpamResource.com, MXToolbox) to view the published TXT record after entering it into DNS. Users can also consult their email service provider (ESP) to ensure correct account setup.

Key opinions

  • Use DNS Lookup Tools: Online DNS lookup tools help view the actual DKIM TXT record being published.
  • Consult ESP: Email service providers (ESPs) can verify correct DKIM setup for the user's account.

Key considerations

  • Check TXT Record Value: Verify the TXT record value to identify any appended domain names.
  • ESP Configuration: Ensure the email service provider's setup aligns with the DKIM configuration requirements.
Expert view

Expert from Word to the Wise explains that a user should use online tools to check the format of the domain key, however they may also ask their ESP if they are setup correctly for their account.

May 2023 - Word to the Wise
Expert view

Expert from Spam Resource explains that a non-technical user can verify if their DNS provider is appending the domain name to their DKIM record by first entering their record into the DNS, then using a DNS lookup tool such as those found at SpamResource.com or MXToolbox. This approach allows them to see the value of the TXT record that's actually being published.

May 2024 - Spam Resource

What the documentation says
5Technical articles

Documentation highlights the importance of understanding DNS provider-specific behavior, especially with GoDaddy automatically appending domains to DKIM records. It recommends using tools like the `dig` command to inspect DNS records or checking the Cloudflare dashboard to see the exact record being served. Understanding DNS record syntax from RFC 1035 and the role of the selector from DKIM.org aids in identifying appending issues.

Key findings

  • GoDaddy Auto-Appending: GoDaddy automatically appends the domain to DKIM records.
  • dig Command: The `dig` command can show the exact DKIM record being served.
  • Cloudflare Dashboard: The Cloudflare dashboard allows checking the TXT records for DKIM to see the actual served record.
  • RFC 1035 Syntax: Understanding DNS syntax (RFC 1035) aids in recognizing unintended domain appending.
  • DKIM Selector: The DKIM selector's correct format is critical for the email server to find the public key.

Key considerations

  • GoDaddy Record Entry: When using GoDaddy, do not include the domain name as part of the DKIM host record.
  • dig Output: Copy and share the output from the `dig` command with someone who can interpret it or compare it to the record you entered.
  • Cloudflare Login: If using Cloudflare, ensure you're logged in to your Cloudflare dashboard to check DNS settings.
  • Fully Qualified Domain: Be aware that domain names are often fully qualified (ending with a dot), which helps recognize unintentionally appended domain names.
  • Selector Format: Double-check the format of the selector as defined by DKIM.org.
Technical article

Documentation from Cloudflare explains that if using Cloudflare as your DNS provider, you can log in to your Cloudflare dashboard, navigate to the DNS settings, and check the TXT records for DKIM. The dashboard shows the exact record that Cloudflare is serving, so users can identify if the domain is being appended.

August 2024 - Cloudflare Help Center
Technical article

Documentation from Google Workspace Admin Help explains that when using GoDaddy, you need to be aware that GoDaddy automatically appends the domain name to DKIM records. Therefore, when entering the DKIM record, ensure you don't include the domain name as part of the host record.

April 2024 - Google Workspace Admin Help
Technical article

Documentation from DigitalOcean explains the `dig` command is a powerful tool to diagnose DNS issues. Using `dig selector._domainkey.yourdomain.com TXT` will show the exact DKIM record being served. Non-technical users can copy the output and share it with someone who can interpret it, or compare it to the record they entered.

July 2023 - DigitalOcean
Technical article

Documentation from DKIM.org shares that the selector portion of the DNS name allows the email server to find the correct TXT record containing the public key, so its critical that it's in the right format. It defines the exact structure of how the records should be setup, which assists in any appending issues.

June 2024 - DKIM.org
Technical article

Documentation from RFC 1035, while technical, defines the basic syntax and structure of DNS records. Understanding that domain names are often fully qualified (ending with a dot) can help non-technical users recognize when a domain is unintentionally appended, creating a double domain.

May 2021 - RFC Editor