We use a sub domain "mail.domain.com" for sending marketing emails from Salesforce Marketing Cloud, the reason it was set up this way is to keep the reputation of this domain separate from our normal domain "domain.com".
All of the links within the mail headers point to "mail.domain.com", except for the From: field which contains the user's mail address on our primary domain "domain.com".
Currently we are failing DKIM because the From: field is domain.com and DKIM is expecting the From: header to be mail.domain.com.
What is the suggested set up for this configuration?