How To Setup your DNS for Full Domain Transparency with CritSend
For an in-depth explaination of how SPF & DomainKeys/DKIM authentication work, see the CritSend SPF & DomainKeys Authentication & Verification Explaination page
There are 2 steps to enabling full domain personalization:
Step 1: Add our SPF & DomainKey entries to your DNS.
Step 2: Tell CritSend Mail Settings what domain(s) you have added.
Step 1: Adding CritSend SPF & DomainKey entries to your DNS
1. To add the SPF Entry:
Add the following TXT entry to your domain:
2. To add the DomainKeys Entry:
Add a TXT record with the following Name and Value:
- Name:
default._domainkey
OR if you are using BIND, you can add this directly:
Step 2: Tell CritSend Mail Settings what domains you have added.
1. Log into myaccount.critsend.com and Go to your Mail Settings tab:
2. Enter your "Signed-by Domains" (comma-separated)
These are the domains you have just added your DNS entries to. Example for one domain: yourdomain.com Example for multiple domains (if you have modified your DNS for yourdomain.com and your-other-domain.com): yourdomain.com,your-other-domain.com Caution: Hotmail's DKIM verifying procedure needs the "From" address' domain to be the same as the DKIM signing domain. So, if your signing domain is "yourdomain.com", your "From" address should be something like "example@yourdomain.com".
3. Enter ONE "On Behalf of Address" per domain
In the "On Behalf Of Address" field, enter a default email address for the domain(s) for which you have just updated your DNS. This is NOT the same as your Mail-From: or From: address and does not affect your Mail-From: or From: address, it is for SPF authentication purposes only. Example: noreply@yourdomain.com Example for multiple domains: (if you have modified your DNS for yourdomain.com and your-other-domain.com) whatever@yourdomain.com,support@your-other-domain.com