Send on behalf of

As a Sertifi Super Admin, you can make updates your DNS server to enable the Send on Behalf of Feature in your Portal. This feature enables you to update the emails sent to your clients to come from a custom domain, rather than [email protected].

This work should be completed by your IT department.

Once you make these DNS server updates, inform your Customer Success Manager to verify the updates and enable the feature on your portal.

Entry Types

There are three types of entries you can make to your DNS server to enable the Send on behalf of feature and ensure your email reliability. You can either update your SPF framework or update your DKIM key and Return path. However, if you update all three entry types, you create DKIM/SPF alignment, which can increase deliverability of emails.

Updating your SPF framework

The first entry is to either update your existing SPF framework or create a new one. By doing this, you authorize Sertifi's specific IP addresses to send on your behalf. You can use a tool like MXtoolbox's Super Tool to generate a record to either add the Sertifi IP addresses, or a helper record that Sertifi maintains.

For example, if you want to add a new record for domain nonexistantdomain.dev, you'd make the following updates to your DNS:

  • Type: TXT
  • Host/Name: nonexistantdomain.dev
  • Value: v=spf1 include:spf.sertifi.net -all

Here, you should be able to add spf.sertifi.net to your SPF framework. However, if you currently have a limit on the number of pointers you can have in a policy, contact Sertifi to receive our specific IP addresses.

DKIM Key(s)

DomainKeys Identified Mail (DKIM) is a type of email authentication method. This method attaches a digital signature, linked to a domain name, to each outgoing email message. This isn't viewable by your client. For this entry type, add a new value, provided by your Sertifi CSM, to your DNS server.

Return path(s)

Return path indicates where bounce messages are sent. In this case, you authorize a third party (in this case, Sertifi) to receive bounce-back messages. With this entry, add a new value, provided by Sertifi, to your DNS server.