Most orgs aren't going to verify the regular domain and just trust users to not change the envelope-from address back to the regular domain. How do we get relaxed DKIM integrated?
help.returnpath.com/.../220564567-What-is-DomainKeys-Identified-Mail-DKIM-alignment-for-DMARC-
Ivan,
Thank you for your quick response. While not the information I was hoping for it will probably allow us to move forward.
Please consider adding this to your documentation:
"user cannot change Custom Envelope-From address to root domain for Dynamics Marketing as "bouncing" prefix is a mandatory. Custom Envelope-from validation will fail, the feature will be disabled, and default Envelope-From domain will be used automatically. There is no other way to specify Envelope-From address anywhere inside Dynamics Marketing, header is being added during the generation of the email during send process."
Hi JeffJero
As per our documentation here are the requirements for Custom Envelope-From:
- The Envelope-from field should not be empty.
- The Envelope-from domain should be a subdomain of a domain you have entered.
- The Envelope-from domain should start with “bouncing”.
- No dots are allowed in the subdomain name.
- Only plain letters and numbers are allowed (no symbols).
With that said, user cannot change Custom Envelope-From address to root domain for Dynamics Marketing as "bouncing" prefix is a mandatory. Custom Envelope-from validation will fail, the feature will be disabled, and default Envelope-From domain will be used automatically. There is no other way to specify Envelope-From address anywhere inside Dynamics Marketing, header is being added during the generation of the email during send process.
Hi Ivan,
My problem is that Dynamic is requiring me to verify my root domain of contosso.com to use bouncing.contosso.com.
There is nothing stopping a user from changing the custom envelope-from back to the root domain.
The way to prevent this with every other major marketing platform is to use relaxed DKIM.
To verify and use the bouncing.contosso.com domain and allow the change of the from domain to contosso.com without giving the ability to use the the root domain as the envelope from domain.
This prevents a misconfiguration of the marketing platform to impact the trust level of our root domain.
Hello, my name is Ivan Maltsev. I am Deliverability Engineer at Microsoft Dynamics 365 Marketing.
Thank you for a good question.
In order to have proper DKIM signing in place for your emails while using Dynamics 365 Marketing platform, we offer to follow Domain Authentication process.
After your domain is added to the platform, and the process of authentication and confirmation finished, all emails sent from the specified domain will be signed with this DKIM domain to ensure alignment.
Additionally, we support set up of custom Envelop-From address, to have additional alignment between Header from and Envelope From domains. (If custom envelope-from is not set up, Envelope-From address is automatically generated by the platform for proper bounce processing and will be different comparting to the From domain).
Hello, my name is Ivan Maltsev. I am Deliverability Engineer at Microsoft Dynamics 365 Marketing.
Thank you for a good question.
In order to have proper DKIM signing in place for your emails while using Dynamics 365 Marketing platform, we offer to follow Domain Authentication process.
After your domain is added to the platform, and the process of authentication and confirmation finished, all emails sent from the specified domain will be signed with this DKIM domain to ensure alignment.
Additionally, we support set up of custom Envelop-From address, to have additional alignment between Header from and Envelope From domains. (If custom envelope-from is not set up, Envelope-From address is automatically generated by the platform for proper bounce processing and will be different comparting to the From domain).
André Arnaud de Cal...
291,965
Super User 2025 Season 1
Martin Dráb
230,817
Most Valuable Professional
nmaenpaa
101,156