# DKIM Alignment passes with DKIM record that doesn't exist

**URL:** <https://forum.dmarcian.com/t/dkim-alignment-passes-with-dkim-record-that-doesnt-exist/2628>\
**Category:** Technical Help\
**Created:** [November 6, 2024, 3:55am UTC](https://forum.dmarcian.com/t/dkim-alignment-passes-with-dkim-record-that-doesnt-exist/2628 "2024-11-06T03:55:55Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![gdycus-sikich](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.dmarcian.com/gdycus-sikich/32/434_2.png) [@gdycus-sikich](https://forum.dmarcian.com/u/gdycus-sikich)\
**Post date:** [November 6, 2024, 3:55am UTC](https://forum.dmarcian.com/t/dkim-alignment-passes-with-dkim-record-that-doesnt-exist/2628/1 "2024-11-06T03:55:55Z")

</div>

Currently, [sendgrid.net](http://sendgrid.net) is passing DMARC through DKIM alignment; however, when looking at the DNS records for the main domain, the DKIM record doesn’t exist. How can this pass DKIM alignment if the record doesn’t actually exist or how can I figure out where this record exists?

---

<div class="post-metadata">

**Author:** ![Vindruva](https://avatars.discourse-cdn.com/v4/letter/v/b3f665/32.png) [@Vindruva](https://forum.dmarcian.com/u/Vindruva)\
**Post date:** [November 6, 2024, 9:00am UTC](https://forum.dmarcian.com/t/dkim-alignment-passes-with-dkim-record-that-doesnt-exist/2628/2 "2024-11-06T09:00:05Z")

</div>

Sendgrid uses CNAME records to configure DKIM. They are per standard located at:  
s1.\_domainkey.YourDomain.com  
s2.\_domainkey.YourDomain.com

These CNAME records point to a host name at Sendgrid where they host the actual DKIM record for you.

It is however possible to use a custom selector as well, so you could have something else than s1 and s2.

---

<div class="post-metadata">

**Author:** ![gdycus-sikich](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.dmarcian.com/gdycus-sikich/32/434_2.png) [@gdycus-sikich](https://forum.dmarcian.com/u/gdycus-sikich)\
**Post date:** [November 11, 2024, 7:51pm UTC](https://forum.dmarcian.com/t/dkim-alignment-passes-with-dkim-record-that-doesnt-exist/2628/3 "2024-11-11T19:51:45Z")

</div>

I understand the CNAME aspect of this. I didn’t create the CNAME records for it and they do not show up in our DNS records. Unsure of where DMARCIAN is pulling that record.

---

<div class="post-metadata">

**Author:** ![Asher](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.dmarcian.com/asher/32/104_2.png) [@Asher](https://forum.dmarcian.com/u/Asher)\
**Post date:** [November 12, 2024, 1:33pm UTC](https://forum.dmarcian.com/t/dkim-alignment-passes-with-dkim-record-that-doesnt-exist/2628/4 "2024-11-12T13:33:45Z")

</div>

Hi Garrett and welcome to the forums!

The forums are not meant to be a dmarcian product channel as they are viewable publicly. Contact [support@dmarcian.com](mailto:support@dmarcian.com) so we may review specific examples of what you are speaking of specifically.

That being said, based on your forum account, I believe I did find your dmarcian account. I will not share any domain details here, but I did find emails sent from Sendgrid passing DMARC through both SPF and DKIM, and the records referenced are in fact published in your domain’s DNS.

Give our support team a shout via email, and we’ll be happy to discuss this further.

---

<div class="post-metadata">

**Author:** ![gdycus-sikich](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.dmarcian.com/gdycus-sikich/32/434_2.png) [@gdycus-sikich](https://forum.dmarcian.com/u/gdycus-sikich)\
**Post date:** [November 14, 2024, 4:26am UTC](https://forum.dmarcian.com/t/dkim-alignment-passes-with-dkim-record-that-doesnt-exist/2628/5 "2024-11-14T04:26:43Z")

</div>

Sorry for not putting this in the right channel. Thanks for providing the information for support. I was able to email you all and hopefully we can figure this out. Thanks.
