> I'm attempting to demonstrate Well, have fun with that. I guess I still don't understand why you're worried about office366-type domains if you're whitelisti

> I'm attempting to demonstrate Well, have fun with that. I guess I still don't understand why you're worried about office366-type domains if you're whitelisting allowable domains to begin with. Anyway, everyone's risk analysis is different, sounds like you're managing yours accordingly.