I am about to implement DKIM signing on my domain, but couldn't find information about which one to start first: publish DNS or start signing keys.
Explains better:
Considering the time DNS takes to spread out, so:
- If I start signing first, people will see my signed messages before they can see my DNS entry.
- If i publish first, people will see my DNS entry but messages won't be signed.
Which one won't result in messages being rejected?