DKIM (DomainKeys Identified Mail) is a security protocol for email systems that is based on public key cryptography. The encryption of messages with DKIM is based on the principle of creating cryptographic signatures using keys associated with the domain of the sender.
According to this principle, the sender digitally signs each email message by generating a unique hash of the message content using their private key. This hash is then included in the email header, which is transmitted with the message. When the recipient receives the email, their email server can verify the signature using the public key of the sender’s domain. If the hash in the header matches the calculated hash of the message content, the email is considered authentic and has not been tampered with during transmission.
The use of DKIM provides an added layer of security to email communications, as it ensures that the message has not been modified or forged during transmission and that it originated from the sender it claims to be from.