I forgot to mention: there’s **tens** of legitimate subdomains under att-mail.com that sign email with spf, dkim or both. Each has a varying level of DMARC Enforcement as well, FWIW.
Hope this helps to address Bill’s concerns, Tom’s great question. More to follow, thank you. -Udeme (AT&T Chief Security Office) On Wed, Sep 16, 2026 at 10:24 PM Udeme Ukutt <[email protected]> wrote: > Hello sir! > > Yes … mostly outbound, some mix of inbound & outbound depending on the > business use case. I have the M3AAWG Sender Best Common Practices in my > pocket too. Happy to discuss more offline. > > Thanks! Udeme > > > On Wed, Sep 16, 2026 at 6:08 PM Tom Bartel <[email protected]> wrote: > >> Udeme, >> >> So att-mail.com is valid apex domain... as in serviceable for email >> users inbound/outbound etc? Corporate users? Consumers? Staff? >> >> Thanks! >> >> Tom >> >> On Wed, Sep 16, 2026 at 11:06 AM Udeme Ukutt <[email protected]> wrote: >> >>> I replied to Bill directly and I’m taking a look at this, but I serve >>> within our Chief Security Office. I drive policy, infrastructure and >>> cybersecurity items here. >>> >>> For closure I’ve picked this one up and looking into it. att-mail.com >>> is a valid apex domain, and I’m tightening some enforcement items any day >>> now. >>> >>> Feel free to reach out directly for anything email related at AT&T. >>> >>> -Udeme >>> >>> On Tue, Sep 15, 2026 at 5:36 PM Bill Cole < >>> [email protected]> wrote: >>> >>>> AT&T made the mistake of spamming a pitch for the next iPhone via >>>> Oracle >>>> infra to my primary work address, which has never been given to any >>>> vendor or other corporate entity other than our customers. Prima facie >>>> evidence that they don't belong on the default welcomelist. >>>> >>>> If you receive email from any *@*.att-mail.com addresses that you've >>>> been accepting because of the default welcomelist, you'll need to make >>>> your own choice about whether to welcome them in the future. >>>> >>>> -- >>>> Bill Cole >>>> [email protected] or [email protected] >>>> (AKA @[email protected] and many *@billmail.scconsult.com >>>> addresses) >>>> Please keep discussion mailing list replies *on-list* >>>> Not Currently Available For Hire >>>> >>> >> >> -- >> Tom Bartel >> tombartel.com >> 303.517.9655 >> "Life's most persistent and urgent question is, 'What are you doing for >> others?'" - Martin Luther King Jr. >> >
