Adding your records at Gandi
Gandi takes the Issue Mint records on the domain’s DNS records tab, and the one thing to get right there is the trailing dot: a CNAME value without one is read as a hostname inside your own domain. The record set is otherwise the same set every provider gets, and what each record does does not change with the provider.
You are not blocked while these are pending. Your newsletter sends and its website stays published on the issuemint.com address until the records verify.
Open the DNS records tab
Sign in to Gandi, open the domain from your list of domains, and choose its DNS records tab. Add a record is the form, with Type, Name, TTL and a value field whose label changes with the type you pick.
Name is what other providers call Host, and @ means the domain itself. There is also a
text view of the whole zone, which is quicker if you are comfortable reading a zone file
and are adding several records in one sitting.
Add the www and tracking records with a trailing dot
Both are CNAME records. Type the bare label in Name, paste the destination into the value field, and add a dot to the end of it.
| Record | Type | Host | Value |
|---|---|---|---|
| Website (www) | CNAME | www | sites.issuemint.com |
| Click tracking | CNAME | go | t.issuemint.com |
The go record is what serves your click tracking links
from your own domain rather than ours.
Add the certificate and DMARC records
The three certificate records are CNAMEs on _acme-challenge hosts, and their values
hold an identifier that only exists inside your account, so copy each one from the
domain tab. They take the same trailing dot as the records above, and they keep HTTPS
renewing on each of your hostnames afterwards.
| Record | Type | Host | Value |
|---|---|---|---|
| Certificate validation | CNAME | _acme-challenge | the value shown in your domain tab |
| Certificate validation | CNAME | _acme-challenge.www | the value shown in your domain tab |
| Certificate validation | CNAME | _acme-challenge.go | the value shown in your domain tab |
| DMARC policy (optional) | TXT | _dmarc | v=DMARC1; p=none; |
The DMARC row is a TXT record and needs no dot, because its value is a policy rather
than a hostname. It is a suggestion, too: a _dmarc record you already have is left
exactly as it is.
Add the sending records when they appear
Five more records turn up in the domain tab shortly after the domain is added, once Amazon has minted your DKIM tokens. They are what let issues come from your own address instead of ours, and the three DKIM rows are the ones worth adding today rather than at the weekend.
| Record | Type | Host | Value |
|---|---|---|---|
| DKIM signing | CNAME | the first token shown in your domain tab, then ._domainkey | the matching dkim.amazonses.com value |
| DKIM signing | CNAME | the second token, then ._domainkey | the matching dkim.amazonses.com value |
| DKIM signing | CNAME | the third token, then ._domainkey | the matching dkim.amazonses.com value |
| Custom MAIL FROM | MX priority 10 | send | feedback-smtp.eu-west-1.amazonses.com |
| SPF for MAIL FROM | TXT | send | v=spf1 include:amazonses.com ~all |
The DKIM values are hostnames, so each one ends with a dot. The MX value is a hostname too, with its priority in Gandi’s own field beside it. The SPF row is a TXT record and takes no dot. What changes once all five pass is described in sending from your own domain.
Use the www address if the root will not take a CNAME
Gandi has no ALIAS or ANAME record type, so there is no supported way to put the root of a domain on a hostname, and that row may be refused outright.
When the root is the only thing left outstanding, the domain tab offers
www.yourdomain.com as your address instead: one click, reversible, and the root records
stay in the table being checked in case you move DNS later. If other rows are failing
too, work through a record that will not
verify first, because a missing dot and a
missing record look identical from the outside.
Questions
Does the trailing dot matter in the name field too?
No. Names are relative to your domain at Gandi, so www and go are typed bare and @ means the domain itself. The dot matters on the value side, where a hostname without one is read as a name inside your own zone.
Will Issue Mint mind the trailing dot when it checks?
No. Issue Mint ignores trailing dots, letter case and the quotes some providers wrap around a TXT value when it compares what resolved against what it asked for. The dot is for Gandi's benefit rather than ours.
Try it on your own list.
14 days, every feature, no card. Sending works from the moment you sign up.
Start your trial