DKIM
Has anyone seen this issue before?
I've created a TXT record for a domin. The DKIM TXT record is not being recognized by email validators, despite being configured correctly in Cloudflare. The record is split into two quoted strings in DNS, which may cause compatibility issues with DKIM validation.
Suspected Cause:
DKIM requires a single, uninterrupted TXT value. Cloudflare may split the record if it exceeds 255 bytes or due to formatting. The split could be causing email validators to misinterpret the key. Every time I remove the quoted strings in DNS Cloudflare separated it when I save the record.
2 Replies
Support AI
According to the Cloudflare community forum (https://community.cloudflare.com/t/854082), this issue has been reported before. The problem is that Cloudflare modifies the TXT record value by adding parentheses, which is normal behavior for TXT records that need to be split every 255 characters.
As mentioned in the forum post, this is a known behavior and not a bug. The solution is to accept that the TXT record will be split into two quoted strings in DNS, as this is a standard practice for TXT records that exceed the 255 character limit.
Sources
This is an AI generated response, it may not be 100% accurate. Please validate the output. You can ask followups by replying to this message or mentioning me.
As the AI says, the splitting of long TXT records is normal and a requirement of the DNS standards. Cloudflare didn't use to show you this in the dashboard (but returned the records correctly when queried) but now does.
If you give the domain and DKIM selector it's easier to check, but usually problems are due to CNAME flattening being enabled or
_domainkey being delegated (NS records for _domainkey in your Cloudflare DNS imported from a previous DNS).