Summary of Reddit Comments on "Does Shopify use SPF record entries":

Shopify and SPF Records:

• Adding SPF records is recommended for Shopify:

  • "I say follow the spec and add it."
  • "Not every provider cares about SPF, and some don't even check it. But it's better to have it and not need it."

• To check SPF alignment with Shopify:

  • Shopify should send an email to DMARCtester.com to verify alignment.
  • DKIM is sufficient for DMARC to pass.

• Gmail users experiencing spam issues should update SPF records:

  • "Is it somehow related to the SPF thing? Do I need to update SPF?" - u/-soma-

General Guidance on SPF, DKIM, and DMARC:

• Setting up SPF, DKIM, and DMARC is crucial for email deliverability and preventing email from going to spam:

  • "Yes you need to set up SPF, DKIM, and DMARC on all of your domains, otherwise your emails will go to spam."
  • Instantly's guides may not be as helpful in this regard.

• For correct SPF formatting, it's important to differentiate ip4: and include::

  • -all is recommended over ~all for alignment.

• DMARC adds an extra layer of security by ensuring alignment between the From: address domain and the MailFrom: address domain:

  • "To pass SPF for DMARC, both Authentication (handled by SPF) and Alignment (handled by DMARC) are required."

Other Factors Affecting SPF Records:

• AmazonSES requires domain ownership validation:

  • Users need to use a subdomain and put SPF there for a custom MailFrom.

• Google Domains may require switching from SPF-type records to plain TXT records for SPF policy.

• SPF records should be published using DNS records:

  • Consider switching from type 99 record to a plain TXT record for clarity.

Considerations for Adding Vendors to SPF Records:

• Adding vendors to SPF records is a common practice but should be evaluated for security:

  • "It allows email from the vendor to go out from your company@domain.com."

• It is recommended to assess the trustworthiness of the vendor before adding them to SPF records:

  • "If you do not modify your SPF entry, the mails send from the company will highly likely being blocked by the recipients."

These Reddit comments provide insights on the importance of SPF records, DMARC, and DKIM for email authentication, tips on formatting SPF records correctly, and considerations when adding vendors to SPF records for email deliverability and security.