4 ms·
SPF and DKIM can be applied just fine to subdomains, I don't understand the suggestions made for email, yet there are good reasons to have a few extra domains,
by _wmd 10y ago
SPF and DKIM can be applied just fine to subdomains, I don't understand the suggestions made for email, yet there are good reasons to have a few extra domains, none which are actually mentioned: accidental cookie leakage and redundancy being obvious ones. The implication made for the API domain was that it should not be protected by SPF and DKIM
I stopped reading there
- itaifrenkel 10y agohi. Here is my attempt to clarify this section. Could you please comment on PR https://github.com/forter/security-101-for-saas-startups/pull/35 https://github.com/forter/security-101-for-saas-startups/pul... ?
- itaifrenkel 10y agoMy understanding was that SPF and DKIM are only for sending emails. I need to rearrange that paragraph and add the 2 other reasons you mentioned, and you are right that outgoing emails are better sent from subdomains. I do wonder though if a spam filter blocks x.d.com would it also block emails from d.com?
- deleted 10y ago[deleted]