You are reading a single comment by @hippy and its replies. Click here to read the full conversation.
  • Yeah but I looked at the DNS and it's not split unless they also do some weird shit behind the scenes.

    Godaddy shows my example above as a single string. Then does it's weird shit to make it work in DNS.

    Multiple strings enclosed in quotes and separated by a space. The verifier will remove the " " and smash it all back together again when it realises it is an SPF record. So in your case, the second string is ip4:xxx.xxx.xx.192/27 ip4:xxx.xx.xxx.36 ~all

    If it is a domain you give a shit about, put your explicit ip4's ahead of your includes. Currently, if any of those IPs want to pass, the verifier needs to complete at least 7 other lookups first. 7 is within the acceptable limit of 10, but a free improvement and general rule of thumb would be to put the IPs first.

    Going over 255 characters is less of an issue today, but some people are adamant they need to stay under it. The look up limit is more of a concern.

  • You think the DNS provider is splitting it after entry and then everything else is smooshing it back together. That sounds way to organised to me but I guess it's possible.

    Thanks for the performance tip.

  • That's exactly what's happening. Not all providers do, a lot will. See also 2048 bit DKIM Public Key records. They have to be TXT records but are always going to be >255 characters.

About

Avatar for hippy @hippy started