DomainKeys Identified Mail (DKIM) Signatures

RFC 6376 defines DKIM (DomainKeys Identified Mail), a method for associating a domain name with an email message via cryptographic signing. The sending domain places a private-key signature in a DKIM-Signature header; recipients verify it using the public key published in DNS, ensuring message integrity.