Email DNS

Digital Onboarding can send emails using your institution's domain. It requires you to add two DNS records that will allow recipients email clients to verify that the emails are genuine and not spam of phishing scams.

SPF

The first record you will need to add is an SPF record. An SPF record is just a specialized TXT record. This record gets added at the domain or subdomain you want to use in the email address. For example, if you wanted to send emails from welcome@onboarding.mybank.com you would add this record for onboarding.mybank.com. The value of the record will usually be v=spf1 a:mail.digitalonboarding.com ~all but it may need to be modified if you are merging it with an existing SPF record. Please see https://postmarkapp.com/blog/explaining-spf for more details on constructing SPF records.

DKIM

We sign emails with a key to help email clients verify that emails are genuine. Without this key, many email clients would show a message like via digitalonboarding.com to recipients. To publish the public key that email clients use to verify the signature of the email you need to add a DKIM record to your DNS. A DKIM record is just a specialized TXT record. DKIM for Digital Onboarding will always be at the do._domainkey subdomain. So, using the example from above, if you wanted to send emails from welcome@onboarding.mybank.com your DKIM key would be added to do._domainkey.onboarding.mybank.com.