Forum Discussion
Outlook.de DKIM and DMARC records broken
You’re seeing @outlook.de messages signed with selector1 while DNS returns no public DKIM key, and you also cannot find a DMARC record. Microsoft’s guidance confirms that an absent matching public key produces “no key for signature” and must be corrected by the sender’s domain operator. Because outlook.de is Microsoft-managed, a mailbox owner cannot publish those records or repair this in Outlook.
Repeat both TXT lookups through two independent resolvers, send a fresh test, and save the complete Authentication-Results header plus any nondelivery report. Contact Outlook.com support while signed in and include the UTC send time, Message-ID, selector, receiving domain, and exact lookup results. Ask support to escalate an outbound DKIM/DNS incident for outlook.de. SPF passing does not repair the missing DKIM key, and resetting the Outlook profile will not help. Until Microsoft confirms remediation, re-test delivery rather than assuming all recipient systems will handle the message identically.
Now mails being sent from outlook.de even get rejected straight away - by e.g. gmail due to the missing DKIM / DMARC entries. It is now nearly 2 months that these are broken - so please Microsoft - fix it.
I tried opening cases with your teams but no one could help or relay that request. This is why I am trying it on this way.