[ Sending-service guides ]
Authenticate email sent through Magnews: configuration and verification
Activate Magnews sender-domain DKIM and, where required, a dedicated technical sender domain; verify both the configured state and the emitted message.
By the EmailAuth research team · 5 min read
[ Key points ]
- Keep sender-domain signing and technical-envelope activation separate.
- Reserve the technical domain exclusively for Magnews.
- Verify both activation states against received identities.
[ Takeaway ]
Verify both activation states against received identities.
[ By role ]
What this means for you
Choose your role for practical next steps.
IT / Mail Admin
Track two activation steps
Correct DNS alone does not demonstrate active DKIM or an active custom technical sender.
Next steps
- Publish the account-provided records.
- Record each activation result.
- Compare both selections with a received message.
CISO / SecOps
Reserve technical domains deliberately
Sharing a technical identity with another sender can disrupt mail and blur responsibility.
Next steps
- Check existing domain dependencies.
- Review alignment modes.
- Require domain-wide review before enforcement changes.
Founder / Non-technical
Define the intended sender outcome
Branded From and a custom envelope are separate implementation choices.
Next steps
- Approve the required identity scope.
- Assign communication and DNS owners.
- Keep rollout conditional on both configuration and message evidence.
[ FAQs ]
Frequently asked questions
What is the technical sender domain?
Magnews uses that term for the envelope or Return-Path domain involved in SPF and bounce handling.
How to create a sender domain and configure DKIM Technical Sender Domain: what it is and how to configure it Sender Domain Troubleshooting RFC 7208 SPF RFC 6376 DKIM RFC 9989 DMARC
Does publishing the DKIM TXT record activate signing?
No. The documented workflow also requires Activate certification in Magnews.
How to create a sender domain and configure DKIM Technical Sender Domain: what it is and how to configure it Sender Domain Troubleshooting RFC 7208 SPF RFC 6376 DKIM RFC 9989 DMARC
Where do I obtain the DKIM record?
Use the DNS Host Name and DKIM key from the selected sender domain’s Information section or its downloaded instructions.
How to create a sender domain and configure DKIM Technical Sender Domain: what it is and how to configure it Sender Domain Troubleshooting RFC 7208 SPF RFC 6376 DKIM RFC 9989 DMARC
Can I use a domain already shared by other mail systems as the technical domain?
The Magnews guide requires the selected technical domain to be exclusively reserved to it. Resolve that prerequisite before proceeding.
How to create a sender domain and configure DKIM Technical Sender Domain: what it is and how to configure it Sender Domain Troubleshooting RFC 7208 SPF RFC 6376 DKIM RFC 9989 DMARC
What records does the custom technical domain need?
The current guide specifies account-provided MX and SPF TXT records, followed by technical-sender activation.
How to create a sender domain and configure DKIM Technical Sender Domain: what it is and how to configure it Sender Domain Troubleshooting RFC 7208 SPF RFC 6376 DKIM RFC 9989 DMARC
Are DKIM certification and technical-domain activation the same operation?
No. Record and verify both independently when the custom technical route is required.
How to create a sender domain and configure DKIM Technical Sender Domain: what it is and how to configure it Sender Domain Troubleshooting RFC 7208 SPF RFC 6376 DKIM RFC 9989 DMARC
Does a customer technical subdomain always meet strict SPF alignment?
No. Strict alignment requires exact domain equality; inspect the actual From and envelope identities and policy mode.
How to create a sender domain and configure DKIM Technical Sender Domain: what it is and how to configure it Sender Domain Troubleshooting RFC 7208 SPF RFC 6376 DKIM RFC 9989 DMARC
What still prevents acceptance?
The tenant’s selected configuration, live DNS, original received-message evidence, functional tests and human SME approval remain unverified.
How to create a sender domain and configure DKIM Technical Sender Domain: what it is and how to configure it Sender Domain Troubleshooting RFC 7208 SPF RFC 6376 DKIM RFC 9989 DMARC
[ Sources ]
Sources
- How to create a sender domain and configure DKIM
Sections Create the sender domain; Configure DKIM for the sender domain; Activate DKIM certification
- Technical Sender Domain: what it is and how to configure it
Sections What is the technical sender domain; Select the type of technical sender domain; Configure the DNS records; Activate the technical sender domain
- Sender Domain Troubleshooting
Sections The sender domain has invalid DKIM; The sender domain has DKIM certification deactivated; The sender domain implements DMARC
- RFC 7208 SPF
Sections §3.2; 3.3; 4.6.4
- RFC 6376 DKIM
Sections §3.5; 3.6.2; 6.1
- RFC 9989 DMARC
Sections §4.4; 4.7; 4.10; 5; Appendix A.6 removal of pct
[ Glossary ]
Glossary
- Sender domain
- Magnews’s term for the domain in the visible From address.
- Technical sender domain
- The envelope domain used for SPF and processing delivery feedback.
- DKIM certification
- Magnews’s configured and activated signing state for a sender domain.
- Activate technical sender
- The separate platform step enabling the configured technical domain after DNS publication.
- Dedicated technical identity
- A domain reserved exclusively for the Magnews technical sending arrangement.
Enterprise provenance
Why top financial institutions and governments retired their email security dashboards.
Traditional email authentication platforms sell you a dashboard and ask your engineers to do the labour. In high-stakes environments, manual oversight means delayed enforcement, configuration drift and unmonitored shadow domains.
EmailAuth is the agentic email provenance platform. Our agents enforce p=reject, keep third-party senders aligned and move your domains to full RFC 9989 compliance, the new DMARC standard,, with human-in-the-loop auditability.
SaaS · Dedicated tenancy · Air-gapped on-prem · BYOK encryption