I thought that ?all
in SPF should not be used.
Then I examinated SPF records of some local email provider companies and I found this:
v=spf1 mx ip4:77.75.78.0/23 ip4:77.75.76.0/23 ip6:2a02:598::/32 ?all`
Isn't this basically saying to mark failed SPF as Neutral
, therefore letting basically everyone to send emails on behalf of that domain ?
Their DMARC is set like this:
v=DMARC1; p=none; rua=mailto:abuse@seznam.cz
Again, isn't this saying to do nothing when DMARC fails ?
Then there is the company I'm working in. Their's SPF record is like this:
v=spf1 mx a:xxx.xxx.xxx a:xxx2.xxx.xxx include:protection.outlook.com include:spf.xxx.xxx ?all
Do the include's overwrite the final ?all ? Again, doesn't this say to mark everything as Neutral ?
What's the actual use case of ?all
in SPF records ?