Ensure that DKIM is enabled for all Exchange Online Domains

Why This Matters

Email remains a primary attack vector for phishing and spoofing attacks. Without DKIM enabled, attackers can forge your domain in email messages, making them appear legitimate to recipients. Enabling DKIM for all Exchange Online domains helps ensure email authenticity and protects your organization's reputation.

What Aether365 Checks

This security check verifies that DKIM signing is enabled for every domain configured in Exchange Online. It appears in the Aether365 dashboard under the Microsoft 365 compliance category and maps to CIS control M365.2.1.9.

How to Fix

To enable DKIM for all Exchange Online domains: