---
schema_version: "1"
id: 689fb5881362f6445533b3cec2579de110c1fb974d3b6000868a1cc862b75f50
title: DKIM Signatures Protect the Reply-To Header
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/262-0-0/rn_sales_productivity_dkim_reply_to.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_sales_productivity_dkim_reply_to.htm&release=262.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 1290b6bea2c591736b595f89c339ab861356d6da26c23292a580663abe22430a
description: When you sign email sent by Salesforce with a DomainKeys Identified Mail (DKIM) key, the signature configuration now includes the Reply-To header. To protect against conversation hijacking, this change prevents modification of the Reply-To address during delivery. If you use DKIM keys, you get this benefit automatically. Otherwise, set up DKIM keys to sign outgoing email sent by Salesforce.
products:
  - Cross Cloud
release: "262"
---
# DKIM Signatures Protect the Reply-To Header

When you sign email sent by Salesforce with a DomainKeys Identified Mail (DKIM) key, the signature configuration now includes the Reply-To header. To protect against conversation hijacking, this change prevents modification of the Reply-To address during delivery. If you use DKIM keys, you get this benefit automatically. Otherwise, set up DKIM keys to sign outgoing email sent by Salesforce.

**Where:** This change applies to Lightning Experience and Salesforce Classic in all editions except Salesforce Free Suite and Database.com.

#### See Also

- [_Salesforce Help:_ Create a DKIM Key](https://help.salesforce.com/s/articleView?id=sales.emailadmin_create_secure_dkim.htm&type=5&language=en_US)
- [Verify Your Email Domain Ownership](https://help.salesforce.com/s/articleView?id=release-notes.rn_sales_productivity_email_domain_verify.htm&release=262.0.0&type=5 "To avoid disruption in email sent from Salesforce, verify the domains that you own with a DomainKeys Identified Mail (DKIM) key or an authorized email domain. As part of our ongoing efforts to strengthen the security of our email services, email domain verification is now mandatory. Salesforce no longer delivers emails from unverified domains, even if the email address is verified.")