DomainKeys Identified Mail (DKIM) standard can be used by organizations to automatically sign and verify e-mail messages sent by their SMTP server(s). Other organizations can verify signed messages using public keys retrieved from the DNS database; the signature validity can then be used to classify e-mail messages as wanted or not.
The OpenDKIM library implements DKIM in the form of
a Sendmail milter service, which can be used by SMTP servers. You can use the
debops.opendkim Ansible role to configure the OpenDKIM service on one or
multiple hosts. If debops.postfix role is used together with this one,
Postfix can be automatically configured to sign and verify e-mail messages.
This role requires at least Ansible
v2.3.0. To install it, run:
ansible-galaxy install debops.opendkim