← Back to context

Comment by YesThatTom2

6 hours ago

SPF flattening is difficult to get correct and then you have to check it every so often to update it.

DNSControl automates this. https://docs.dnscontrol.org/language-reference/domain-modifi...

(It’s open source)

As someone managing dns for a lot of orgs, the part that kills me is the amount of crappy sass'es that demand you add a big include to your spf. If they already have a skim record thats plenty to get mail through, except their validator wizard thing wont let you use the tool until it finds their string in your record. That means no flattening either.