| Name: Subdomain DMARC Record Contains None Policy Identifier: subdomain_dmarc_contains_none Severity: Informational Signal Factor: DNS Health |
What is Subdomain DMARC record ?
DMARC helps protect domains from spoofing by telling receiving mail servers how to handle emails that fail SPF and/or DKIM checks. It's defined with a DNS TXT record like below,
v=DMARC1; p=reject; sp=reject; rua=mailto:dmarc-feedback@example.com
In a DMARC record, the sp tag sets the policy for subdomains.
Why is DMARC needed for Subdomain ?
DMARC is required for subdomains to prevent email spoofing and ensure that all parts of your domain including subdomains are protected from abuse.
What should be the DMARC for Subdomain set as?
We recommend using Subdomain DMARC (sp = quarantine or reject) and should not be set as none.
Note: If no DMARC policy is found during the scan, it will be considered as having a DMARC policy of 'none'.