I've found that our current DNS SPF record uses the ~all keyword, but in most examples I've seen -all used.
What's the difference between the two?
Asked
Active
Viewed 9,131 times
9
STW
- 960
- 1
- 7
- 24
1 Answers
13
The tilde and dash identify they different types of failures. Consider a message that doesn't match the parameters specified in the SPF record. Tilde is for a softfail, the message will be accepted and marked if it doesn't match parameters specified. Dash is for a hardfail, the message will be rejected if it doesn't match.
more info here: support.microsoft.com/kb/2640313
mehov
- 568
- 1
- 5
- 14
Russell PItts
- 146
- 1
- 3
-
The link you provided is broken. – lindhe Dec 16 '18 at 19:33
-
Replaced the broken link with a web archive copy. Very useful article by the way! – mehov Feb 21 '20 at 07:22