DKIM finding

Invalid DKIM signature

The DKIM signature is present but does not verify. The message may have been altered in transit, or the signing configuration is broken.

Finding code

dkim_signature_invalid

This finding appears in the findings array of the spam checker and the POST /v1/sender API response when the condition above is detected.

How to fix it

The fix.

The DKIM signature did not verify. This usually means the message was modified in transit, a relay rewrote the body or headers, or the signing configuration is broken. Check that the canonicalization matches what intermediaries do.

Related DKIM findings

Other things we check.

Finding What it means
dkim_missing No DKIM signature
dkim_key_not_found DKIM public key not found
dkim_weak_key Weak DKIM key
dkim_body_hash_mismatch DKIM body hash mismatch
dkim_alignment_fail DKIM alignment failure