<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>ESP on Sender Audit Blog</title><link>https://senderaudit.com/blog/en/tags/esp/</link><description>Recent content in ESP on Sender Audit Blog</description><generator>Hugo</generator><language>en</language><lastBuildDate>Thu, 05 Mar 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://senderaudit.com/blog/en/tags/esp/index.xml" rel="self" type="application/rss+xml"/><item><title>Why Do You See Two DKIM Signatures on a Single Email?</title><link>https://senderaudit.com/blog/en/double-dkim-signature/</link><pubDate>Thu, 05 Mar 2026 00:00:00 +0000</pubDate><guid>https://senderaudit.com/blog/en/double-dkim-signature/</guid><description>&lt;p&gt;You inspect the headers of an email sent through your ESP (Brevo, Mailchimp, SendGrid…) and notice &lt;strong&gt;two distinct DKIM signatures&lt;/strong&gt;: one with your domain, one with the ESP&amp;rsquo;s domain. Is this normal? Absolutely, and it&amp;rsquo;s actually desirable.&lt;/p&gt;
&lt;h2 id="what-it-looks-like-in-the-headers"&gt;What It Looks Like in the Headers&lt;/h2&gt;
&lt;p&gt;Here&amp;rsquo;s a typical &lt;code&gt;Authentication-Results&lt;/code&gt; example:&lt;/p&gt;
&lt;pre tabindex="0"&gt;&lt;code&gt;Authentication-Results: mx.google.com;
 dkim=pass header.i=@yourdomain.com header.s=mail header.b=xjAWgYt1;
 dkim=pass header.i=@esp-domain.com header.s=mail header.b=zNRqfud1;
 spf=pass ...
 dmarc=pass (p=REJECT) header.from=yourdomain.com
&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;And two &lt;code&gt;DKIM-Signature:&lt;/code&gt; blocks in the message: one with &lt;code&gt;d=yourdomain.com&lt;/code&gt;, the other with &lt;code&gt;d=esp-domain.com&lt;/code&gt;.&lt;/p&gt;</description></item></channel></rss>