Yunes is an Operations Team Lead at PowerDMARC with expert knowledge in email authentication and security. Yunes is a Microsoft-certified Azure Administrator Associate with certifications in CompTIA A+ and many more.
SPF policies do not automatically get inherited by subdomains. If you use SPF to authenticate your emails and you are sending emails using subdomains, you would need to set up SPF for subdomains
Domain owners can configure multiple domains to make use of a single SPF record hosted on one domain using SPF redirect. While it may seem to be beneficial in some ways, we don’t recommend it.
Understanding SPF -all vs ~all mechanisms is crucial for email authentication. Learn how these SPF record endings affect email delivery and which one to choose for your domain security.
Companies should properly designate the IP Addresses used to send out emails on their behalf as a permitted sender in the SPF Record to fix the "SPF softfail domain does not designate IP as permitted sender" error.