I installed MIAB few months ago on my domain name (not subdomain). No problems, DNSSEC works, everything perfect! All is green in the admin panel. Thanks Josh.
But, Josh recommend to put MIAB on a subdomain (box.xxx.com) and don't change it (at the installation).
Is there any difference (from a security point of view) to put MIAB on a subdomain vs domain name ? Does it affect the "same origin policy" ?
I'm afraid I do something wrong... and can it affect the security of MIAB?
(Sorry for my english, It's not my first language).