DNS Record Change

Domain digital signatures are a technology that indicates that a message has not been altered or tampered with during transmission. They provide the ability for senders to sign their emails using a private key and for recipients to verify the authenticity of those signatures using a public key located in the DNS. A domain signature can influence how your email is perceived by recipients and email services, reducing the likelihood that your message will be flagged as spam. For answers to frequently asked questions about digital signatures, follow this link.

We offer three options for connecting an electronic signature: 

• Full (may require the assistance of a technician) 
• Full + (optimal)
• Subdomain (additional)

1. Full

Email is generated like this:

• the From: field — your name@yourdomain.com address, 
• the To: field — recipient address, 
• the Sender: field — absent, 
• the Return-Path: field is a technical address in your domain that catches delivery errors and is used to process spam complaints. 

Emails arriving at the technical address specified in the Return-Path: field are automatically forwarded to our service for processing delivery results.

The email is signed with the DKIMs of our and your domains.

Header template:
Mail From (envelope): bounce+XXX@yourdomain.com
From: name@yourdomain.com
Return-Path: bounce+XXX@yourdomain.com

The following information will be visible in Gmail:

To enable this option, go to your account settings → Domain verification → New domain.

Next, click Complex server configuration.

Add in DNS:

yourdomain.com.            IN    TXT    “v=spf1 include:spf2.esputnik.com ~all”
esputnik._domainkey.yourdomain.com.    IN    CNAME    dkim.esputnik.com.

Note:

1. You should use your domain name instead of yourdomain.com.
2. If your domain already has an SPF record, supplement it with our “include:spf2.esputnik.com” insert rather than creating a second record.

In addition, you need to set up automatic forwarding of all emails arriving at the bounce+* mailbox in your domain to our address bounce@trap.esputnik.com.

The "asterisk" symbol means any number of valid characters can replace it.

The easiest way to set up such redirection is if your domain's mail is located on Google servers — this service discards the suffix following the plus sign in the address bar. In this case, you just need to create a “bounce” mailbox and configure the forwarding of all incoming emails to bounce@trap.esputnik.com.

If your mail is on any service that does not support dropping the suffix after the “plus” symbol, set up a mailbox to store all mail coming to your domain for all non-existent mailboxes. In this mailbox, set up a filter — if the email comes to an address starting with “bounce+”, send it to bounce@trap.esputnik.com; otherwise, delete it.

We also recommend that you set up forwarding copies of emails sent to the abuse address in your domain to our address abuse@trap.esputnik.com. Then we will be able to respond to complaints promptly.

If, for some reason, you cannot implement any of these mail forwarding options, select another connection option.

2. Full+

Email is generated like this: 

• the From: field — your name@yourdomain.com address,
• the To: field — recipient’s address,
• the Sender: field — absent,
• the Return-Path: field is the technical address in your subdomain (for example, sub.yourdomain.com), which catches delivery errors and is used to process spam complaints.

Emails arriving at a technical address in a subdomain of your domain, indicated in the Return-Path: field, are accepted by our service for processing delivery results.

The email is signed with the DKIMs of our and your domains.

Header template:
Mail From (envelope): bounce+XXX@sub.yourdomain.com
From: name@yourdomain.com
Return-Path: bounce+XXX@sub.yourdomain.com

The following information will be visible in Gmail:

To enable this option, go to your account settings → Domain verification → New domain.

Choose some unused name for a subdomain in your domain — for example, e, email, promo, mailer, or any other. For clarity, we will assume that you have chosen the name sub.

Add to DNS:

yourdomain.com.            IN    TXT    “v=spf1 include:spf2.esputnik.com ~all”
sub.yourdomain.com.            IN    TXT    “v=spf1 include:spf2.esputnik.com ~all”
sub.yourdomain.com.            IN    MX    10    trap.esputnik.com.
esputnik._domainkey.yourdomain.com.    IN    CNAME    dkim.esputnik.com.

Note:

1. You should use your domain name instead of yourdomain.com.
2. If your domain already has an SPF record, supplement it with our “include:spf2.esputnik.com” insert rather than creating a second record.
3. There must be only one MX record for the selected subdomain.

3. Subdomain

Subdomain is an option for those who, for whatever reason, are not suitable for other connection options. Essentially, this is the same Full option but on a dedicated subdomain and with response processing on our side.

This option is also suitable for situations where you want to separate the reputation of your marketing campaigns from transactional and other communications.

Email is generated like this:

• the From: field — your name@sub.yourdomain.com address,
• the To: field — recipient’s address,
• the Sender: field — absent,
• the Return-Path: field is the technical address in your subdomain  sub.yourdomain.com, which catches delivery errors and is used to process spam complaints.

Our service receives all emails addressed to your subdomain sub.yourdomain.com, which also processes the results.

The email is signed by the DKIMs of our domain and your subdomain.

Header template:
Mail From (envelope): bounce+XXX@sub.yourdomain.com
From: name@sub.yourdomain.com
Return-Path: bounce+XXX@sub.yourdomain.com

The following information will be visible in Gmail:

To enable this option, go to your account settings → Domain verification → New domain.

Next, click Complex server configuration.

Choose some unused name for a subdomain in your domain — for example, e, email, promo, mailer, or any other. For clarity, we will assume that you have chosen the sub name.

Add to DNS:

sub.yourdomain.com.            IN    TXT    “v=spf1 include:spf2.esputnik.com ~all”
sub.yourdomain.com.            IN    MX    10    trap.esputnik.com.
esputnik._domainkey.sub.yourdomain.com.    IN    CNAME    dkim.esputnik.com.

Note:

1. Instead of yourdomain.com, you should use your domain name.
2. There must be only one MX record for the selected subdomain.
3. In this option, all mail for the subdomain you select will arrive at our mail servers and be forwarded to your address, which must be specified in the reply field.

Additional DNS Settings

Suppose your email volumes are high or we see your deliverability drop significantly. In that case, you may need to add settings to your DNS so that our support team can track delivery errors and complaints about your emails in more detail.

We often ask to add authorization keys for postmasters of large mail services.

Checking the Settings Correctness

To ensure that all digital signature elements are configured correctly, you can use the built-in verification tool in your Yespo personal account.

According to the standard, DNS information can be distributed between servers with a long delay — up to 48 hours. Therefore, we recommend making the necessary entries in DNS in advance.

The availability of your published DNS records to mail servers can be checked by any service that allows DNS queries. For example, https://dnsquery.org/

To check that your SPF record is generated correctly and meets the existing limitations of the standard, we recommend a free online tool: https://vamsoft.com/support/tools/spf-policy-tester

Checking Settings During Operation

Yespo regularly checks to make sure your DNS settings are ok. So, a decrease in the reputation of your email campaigns due to accidentally changed settings is practically impossible.

If the settings break, we will notify you about this in an email. Until the issue is resolved, key signing for your domain will be suspended.

For the Full connection option, there is another regular check — checking the serviceability of the forwarding mechanism. If problems are detected in its operation, signing with your domain key will also be suspended.

Please carefully read the emails automatically generated by our service for you. If you receive at least one message about any problem, do not put off solving it for later; immediately contact our support team for help.