[ Sending-service guides ]

Authenticate email sent through Intermedia Exchange Email: configuration and verification

Enable DKIM for an eligible North American Intermedia Hosted Exchange route in the right order, then verify outbound alignment independently of inbound filtering.

By the EmailAuth research team · 4 min read

[ Key points ]

  • Protect business mailbox continuity
  • Publish before activation
  • Separate inbound and outbound controls
On this page
  1. Key points
  2. Takeaway
  3. By role
  4. Frequently asked questions
  5. Sources
  6. Glossary
  7. Related guides

[ Takeaway ]

Enable DKIM for an eligible Intermedia Hosted Exchange route in the right order, then verify outbound alignment independently of inbound filtering.

[ By role ]

What this means for you

Choose your role for practical next steps.

IT / Mail Admin

Publish before activation

DNS must expose the matching verification key before signing is enabled.

Next steps

  1. Capture account-generated values.
  2. Verify authoritative DNS.
  3. Retest after key activation and rotation.

CISO / SecOps

Separate inbound and outbound controls

A limitation in inbound DMARC checking does not remove the need for aligned outbound authentication.

Next steps

  1. Review gateway paths.
  2. Preserve domain policy.
  3. Approve a supported key-overlap plan.

Founder / Non-technical

Protect business mailbox continuity

A signing change should not unexpectedly become a mailbox migration.

Next steps

  1. Confirm the service package.
  2. Schedule a narrow change.
  3. Require evidence from representative routes.

[ FAQs ]

Frequently asked questions

Where are the signing controls?

For an eligible North American account covered by the cited guidance, in HostPilot under Services > Email Protection > Settings > DKIM. Other regions require their matching instructions.

Domain Keys Identified Mail (DKIM) With Outbound Email Filtering

Can I enable signing before adding the TXT record?

No. Publish and verify the matching record first to avoid sending signatures that recipients cannot validate.

Domain Keys Identified Mail (DKIM) With Outbound Email Filtering

Is the article’s sample selector my selector?

No. Use the selector and complete public key generated for your domain.

Domain Keys Identified Mail (DKIM) With Outbound Email Filtering

What if Intermedia hosts my DNS?

Confirm the applicable support-assisted or automatic record handling with Intermedia before assuming publication is complete.

Domain Keys Identified Mail (DKIM) With Outbound Email Filtering

Do I need to move MX records to fix DKIM?

An existing outbound-authentication change does not itself require an inbound mail-routing migration.

What DNS Changes Are Required To Start Using Exchange Hosting With Intermedia?

Does the documented DMARC limitation mean outgoing mail cannot pass?

No. The article distinguishes Intermedia’s DMARC checking from outbound SPF and DKIM that other receivers can evaluate.

Email Protection: Outbound Email Filtering & DLP

How should I rotate the key?

Publish the replacement verification material before switching, and use a provider-confirmed plan for old messages and rollback.

Domain Keys Identified Mail (DKIM) With Outbound Email Filtering

What remains unverified?

The account’s package, generated records, DNS hosting behavior, gateway coverage and received-message results remain unverified.

[ Sources ]

Sources

  1. Email Protection: Outbound Email Filtering & DLP

    Sections Package availability · Domain Key Identified Mail · Domain-based Message Authentication, Reporting & Conformance

  2. Domain Keys Identified Mail (DKIM) With Outbound Email Filtering

    Sections Before You Begin: Confirm Where Your DNS Is Hosted · Enabling DKIM · Disabling DKIM · Generating a new DKIM key

  3. What DNS Changes Are Required To Start Using Exchange Hosting With Intermedia?

    Sections Make Intermedia responsible only for email for your domain · SPF record (optional) · Keep your DNS and your existing mail server in place

  4. RFC 7208 SPF

    Sections §4.6.4 · §3.2

  5. RFC 6376 DKIM

    Sections §3.5 · §6

  6. RFC 9989 DMARC

    Sections Identifier Alignment

[ Glossary ]

Glossary

HostPilot
Intermedia’s control panel used for the documented service and domain settings.
Authoritative DNS
The service publishing the domain’s definitive DNS records.
Selector
The DKIM s= label that identifies which public key validates a signature.
Key rotation
Replacing the active signing key while coordinating publication and retirement of verification records.
Outbound gateway
A service that processes messages on their path from a sender to external recipients.

Enterprise provenance

Why top financial institutions and governments retired their email security dashboards.

Traditional email authentication platforms sell you a dashboard and ask your engineers to do the labour. In high-stakes environments, manual oversight means delayed enforcement, configuration drift and unmonitored shadow domains.

EmailAuth is the agentic email provenance platform. Our agents enforce p=reject, keep third-party senders aligned and move your domains to full RFC 9989 compliance, the new DMARC standard,, with human-in-the-loop auditability.

Governments Large enterprises Tier-1 financial institutions

SaaS · Dedicated tenancy · Air-gapped on-prem · BYOK encryption

Knowledge Base