Yunes is an Operations Team Lead at PowerDMARC with expert knowledge in email authentication and security. Yunes is a Microsoft-certified Azure Administrator Associate with certifications in CompTIA A+ and many more.
Meta: While DMARC protects you from a wide range of cyberattacks, it is no silver bullet. Here is a full list of which attacks does DMARC not protect you from!
SPF policies do not automatically get inherited by subdomains. If you use SPF to authenticate your emails and you are sending emails using subdomains, you would need to set up SPF for subdomains
Domain owners can configure multiple domains to make use of a single SPF record hosted on one domain using SPF redirect. While it may seem to be beneficial in some ways, we don’t recommend it.
Most mailbox providers in recent times read the SPF -all and ~all mechanisms as "NOT PASS". This was not the case before DMARC and is still not the case for a handful of providers.