I've found that our current DNS SPF record uses the ~all keyword, but in most examples I've seen -all used.
What's the difference between the two?
Asked
Active
Viewed 1.2k times
11
STW
- 1,000
- 2
- 7
- 25
1 Answers
15
The tilde and dash identify they different types of failures. Consider a message that doesn't match the parameters specified in the SPF record. Tilde is for a softfail, the message will be accepted and marked if it doesn't match parameters specified. Dash is for a hardfail, the message will be rejected if it doesn't match.
more info here: support.microsoft.com/kb/2640313
ᴍᴇʜᴏᴠ
- 577
- 1
- 6
- 20
Russell PItts
- 166
- 1
- 3
-
The link you provided is broken. – lindhe Dec 16 '18 at 19:33
-
1Replaced the broken link with a web archive copy. Very useful article by the way! – ᴍᴇʜᴏᴠ Feb 21 '20 at 07:22