SPF-SOFTFAIL-ALL
SPF ends with ~all
What it means
Softfail asks receivers to mark rather than reject. It is the right setting while you confirm every sender is listed; long term, -all is stronger. With DMARC at enforcement the difference matters less.
How to fix it
- 1Once the Mail facet shows every legitimate sender covered, change ~all to -all.
Re-check after the change
DNS changes can take up to the record's TTL to be seen; use Re-run on the result page to bypass our 10-minute cache.
