DKIM, DMARC, DNSSEC, SPF and Subdomains | by Teri Radichel | Cloud Security | Aug, 2025

If you apply the security to your top level domain does it apply to the subdomain?

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
⚙️ Check out my series on Automating Cybersecurity Metrics. The Code.
🔒 Related Stories: Network Security | IOT and OS Security | Data Breaches
💻 Free Content on Jobs in Cybersecurity | ✉️ Sign up for the Email List
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Sorry I haven’t written for a while. Been busy and AI is kind of a drag for writers, but I have a lot of things I want to write about anyway when I get the chance.
For today, I was helping someone with a follow up on a pentest and an interesting question came up. When you configure DKIM, DMARC, DNSSEC and SPF for a top level domain, does that apply to all the subdomains?
I thought I’d just write it down for anyone else who needs to know. First of all, if you need to know how to configure those in the first place I wrote about all that and how to test it here: