- Shipped
- October 29, 2026 at 3:50 AM UTC
- Author
- Kamo
- Commit
- bed59c3
An alias domain is an organization domain, and SecurityService already gives every org domain one DKIM key (org_domains.dkim_*), the record the owner is told to publish, and dkim_verified once DNS has it. The mail-server key EmailService generated for alias domains was a second key and a second record for the same domain; none had been generated yet. - OrgDomainDkimKeys: a member's mail from an ownership-verified org domain whose key is published is signed with that key (alias domains, and an org's own mail domain); platform hosts stay with rspamd. - KamoMailAliasDomains is routing only. - GET /alias-domains/{id}/dns: MX status, the org domain id the SPF/DKIM/DMARC steps work from, and their last answers. - The composer lists an address once when a member holds an explicit alias at the primary mailbox's alias-domain copy (how a member keeps kamouniverse.com while the org default moves to another alias domain).