subdomains

Subdomain DMARC: Why the sp= Tag Matters More Than You Think

Does p=reject cover your subdomains? Usually yes — but one tag can silently undo it. How subdomain policy inheritance really works, and how to lock down the dormant subdomains attackers love.