Forum Discussion
Outlook.de DKIM and DMARC records broken
You’re seeing @outlook.de messages signed with selector1 while DNS returns no public DKIM key, and you also cannot find a DMARC record. Microsoft’s guidance confirms that an absent matching public key produces “no key for signature” and must be corrected by the sender’s domain operator. Because outlook.de is Microsoft-managed, a mailbox owner cannot publish those records or repair this in Outlook.
Repeat both TXT lookups through two independent resolvers, send a fresh test, and save the complete Authentication-Results header plus any nondelivery report. Contact Outlook.com support while signed in and include the UTC send time, Message-ID, selector, receiving domain, and exact lookup results. Ask support to escalate an outbound DKIM/DNS incident for outlook.de. SPF passing does not repair the missing DKIM key, and resetting the Outlook profile will not help. Until Microsoft confirms remediation, re-test delivery rather than assuming all recipient systems will handle the message identically.