Sign hello.kamocrm.com with its own customer key, by the From domain itself

Shipped

September 12, 2026 at 12:06 AM UTC

Author

Kamo

Commit

882be78

Campaign mail leaves as hello.kamocrm.com through postfix-bulk. It gets its own DKIM key (selector customer, published as customer._domainkey.hello), and use_esld = false so a hello.kamocrm.com message is signed d=hello rather than falling back to the parent's mail key, which fails the strict DKIM alignment (adkim=s) the domain publishes.