CD
Cloudflare Developers•7mo ago
Unknown User

DKIM - old txt rather than CNAME

22 Replies
Unknown User
Unknown UserOP•7mo ago
Message Not Public
Sign In & Join Server To View
DarkDeviL
DarkDeviL•7mo ago
That DKIM record has nothing to do with Google, and is actually coming from Microsoft Office 365. "selector2._domainkey.mantrasystems.com" as you can see under "Non-authoritative answer", is a canonical name (CNAME) to "selector2-mantrasystems-com._domainkey.mantrasystems.onmicrosoft.com". That output you're demonstrating is actually following your CNAME record, and getting the actual (final) TXT response from the record on "selector2-mantrasystems-com._domainkey.mantrasystems.onmicrosoft.com". (And same applies to the .co.uk, both for selector1 and selector2).
Unknown User
Unknown UserOP•7mo ago
Message Not Public
Sign In & Join Server To View
DarkDeviL
DarkDeviL•7mo ago
The phrase you did mention from them, Microsoft seem to refer to "cache records", ... ?dns-cache
SuperHelpflare
SuperHelpflare•7mo ago
DNS cache Resolving DNS entries is complex and involves many parties (your browser, your operating system, your router and then your ISP's resolver). Any and all of these intermediaries can potentially cache your DNS request and serve stale content, even though you just updated it. Quick fixes: 1. Use a different browser 2. Restart your PC 3. Change your DNS from your ISP's to Cloudflare's: https://one.one.one.one/dns/#setup-instructions
DarkDeviL
DarkDeviL•7mo ago
COULD maybe be related as well, if they checked the records just before they were added, then the fact that they didn't exist when they originally checked it, could be cached for a little while. Both actual existing DNS records, as well as non-existing DNS records will be cached. In that case, there's no other ways than to wait a while, and try again.
Unknown User
Unknown UserOP•7mo ago
Message Not Public
Sign In & Join Server To View
DarkDeviL
DarkDeviL•7mo ago
It won't be the Google record that is interfering in any way, when we're talking that long time... Also, normally, Google is using "google" as it's default selector, compared to Microsoft which takes "selector1" and "selector2", so unless you can demonstrate otherwise, I wouldn't suspect they are related at all. Anyway, there are various online checkers you can check by sending a message to, to see what they actually see. That may be worth a try... Sending a message to the Port25 (now Postmark) tool, - check-auth@verifier.port25.com. Sending a message to the https://mail-tester.com/ tool, - using the generated address on their website. Just to mention two examples.
Unknown User
Unknown UserOP•7mo ago
Message Not Public
Sign In & Join Server To View
DarkDeviL
DarkDeviL•7mo ago
No, that key is NOT Google Workspace, as we've told you several times now.
Unknown User
Unknown UserOP•7mo ago
Message Not Public
Sign In & Join Server To View
DarkDeviL
DarkDeviL•7mo ago
How exactly are you getting those two to be the same? 1. What about "p=MIIBIj" (Microsoft) versus "p=MIGfMA" (Google)?
Unknown User
Unknown UserOP•7mo ago
Message Not Public
Sign In & Join Server To View
DarkDeviL
DarkDeviL•7mo ago
2. What about "goggle._domainkey" versus "selector._domainkey"? It is NOT going to be the exact same from two different email providers.. You're going to have to look a little better at it, comparing from character to character...
Unknown User
Unknown UserOP•7mo ago
Message Not Public
Sign In & Join Server To View
DarkDeviL
DarkDeviL•7mo ago
The CNAME is added on your DNS provider, yes. But a CNAME tells the requestor to make another query, towards the target of that CNAME record.
Unknown User
Unknown UserOP•7mo ago
Message Not Public
Sign In & Join Server To View
1.1.1.1
1.1.1.1•7mo ago
DNS over Discord: TXT records
selector2._domainkey.mantrasystems.com TXT @1.1.1.1 +noall +answer 
NAME                                | TTL    | DATA     
------------------------------------+--------+----------
selector2._domainkey.mantrasystems. | 300s   | selector2
com                                 |        | -mantrasy
                                    |        | stems-com
                                    |        | ._domaink
                                    |        | ey.mantra
                                    |        | systems.o
                                    |        | nmicrosof
                                    |        | t.com.   
selector2-mantrasystems-com._domain | 3,600s | "v=DKIM1;
key.mantrasystems.onmicrosoft.com   |        |  k=rsa; p
                                    |        | =MIIBIjAN
                                    |        | BgkqhkiG9
                                    |        | w0BAQEFAA
                                    |        | OCAQ8AMII
                                    |        | BCgKCAQEA
                                    |        | qwOGhW5w3
                                    |        | vTC3j59hP
                                    |        | 9DeFARJRv
                                    |        | cnzftb2bn
                                    |        | /KNdwaUes
                                    |        | VYIalDQXK
                                    |        | rgi6BZZps
                                    |        | 6C/mX5Brc
                                    |        | 18JSPKuUv
                                    |        | huK4T//pZ
                                    |        | KX/OimvEu
                                    |        | xHTtyTs2i
                                    |        | j7b4CAZBv
                                    |        | n4t8Ts+OL
                                    |        | f2Fwx0UMd
                                    |        | /Cm8slYHn
                                    |        | wxnFWT9DK
                                    |        | nXTjeLKRq
                                    |        | Hu3zxEuyE
                                    |        | 5kelzfx/k
                                    |        | ZJH/cLgFl
                                    |        | 0y48""qoz
                                    |        | foscVwz0q
                                    |        | sAQzfovh/
                                    |        | wgmeKG909
                                    |        | 0EMBrgUT6
                                    |        | +FJ1XAcg+
                                    |        | 8nzVbBc7R
                                    |        | nFpk0jYK/
                                    |        | W7InBXzmL
                                    |        | zfQiCzT9j
                                    |        | auWsiO1wu
                                    |        | RhStHS9bZ
                                    |        | C1BcqhQ+6
                                    |        | JrWcydUvR
                                    |        | foClblNNS
                                    |        | WD2Nc/3Ts
                                    |        | AM1izuXx9
                                    |        | lQIDAQAB;
                                    |        | "        
NAME                                | TTL    | DATA     
------------------------------------+--------+----------
selector2._domainkey.mantrasystems. | 300s   | selector2
com                                 |        | -mantrasy
                                    |        | stems-com
                                    |        | ._domaink
                                    |        | ey.mantra
                                    |        | systems.o
                                    |        | nmicrosof
                                    |        | t.com.   
selector2-mantrasystems-com._domain | 3,600s | "v=DKIM1;
key.mantrasystems.onmicrosoft.com   |        |  k=rsa; p
                                    |        | =MIIBIjAN
                                    |        | BgkqhkiG9
                                    |        | w0BAQEFAA
                                    |        | OCAQ8AMII
                                    |        | BCgKCAQEA
                                    |        | qwOGhW5w3
                                    |        | vTC3j59hP
                                    |        | 9DeFARJRv
                                    |        | cnzftb2bn
                                    |        | /KNdwaUes
                                    |        | VYIalDQXK
                                    |        | rgi6BZZps
                                    |        | 6C/mX5Brc
                                    |        | 18JSPKuUv
                                    |        | huK4T//pZ
                                    |        | KX/OimvEu
                                    |        | xHTtyTs2i
                                    |        | j7b4CAZBv
                                    |        | n4t8Ts+OL
                                    |        | f2Fwx0UMd
                                    |        | /Cm8slYHn
                                    |        | wxnFWT9DK
                                    |        | nXTjeLKRq
                                    |        | Hu3zxEuyE
                                    |        | 5kelzfx/k
                                    |        | ZJH/cLgFl
                                    |        | 0y48""qoz
                                    |        | foscVwz0q
                                    |        | sAQzfovh/
                                    |        | wgmeKG909
                                    |        | 0EMBrgUT6
                                    |        | +FJ1XAcg+
                                    |        | 8nzVbBc7R
                                    |        | nFpk0jYK/
                                    |        | W7InBXzmL
                                    |        | zfQiCzT9j
                                    |        | auWsiO1wu
                                    |        | RhStHS9bZ
                                    |        | C1BcqhQ+6
                                    |        | JrWcydUvR
                                    |        | foClblNNS
                                    |        | WD2Nc/3Ts
                                    |        | AM1izuXx9
                                    |        | lQIDAQAB;
                                    |        | "
diggy diggy hole
DarkDeviL
DarkDeviL•7mo ago
From the above, what you literally see is: 1. Can I have the TXT for selector2._domainkey.mantrasystems.com? 2. (Cloudflare) Please ask selector2-mantrasystems-com._domainkey.mantrasystems.onmicrosoft.com instead! 3. Can I have the TXT for selector2-mantrasystems-com._domainkey.mantrasystems.onmicrosoft.com? 4. (Microsoft) The TXT for selector2-mantrasystems-com._domainkey.mantrasystems.onmicrosoft.com is "v=DKIM1; k=rsa; p=MIIBIj..." With the "v=DKIM1; k=rsa; p=MIIBIj..." being supplied to you directly by Microsoft's DNS.
Unknown User
Unknown UserOP•7mo ago
Message Not Public
Sign In & Join Server To View
DarkDeviL
DarkDeviL•7mo ago
CNAME records are simply aliases, that say "Go to this other location, to try to get the information you want". Keep them as they are right now. And keep disturbing Microsoft Support, if you continue to see issues.
Unknown User
Unknown UserOP•7mo ago
Message Not Public
Sign In & Join Server To View

Did you find this page helpful?