> On Mar 30, 2017, at 12:35 PM, Dominic Raferd <domi...@timedicer.co.uk> wrote: > > As I understand it, ​DKIM requires a separate DNS record for each subdomain
No, DKIM has no such requirement. The DKIM signing domain "d=" in the DKIM signature header is not constrained to match the domain in the rfc2822 "From:" header. All that DKIM conveys is the identity of the domain responsible for the content. DKIM authenticates the origin domain, not the author. -- Viktor.