⚡ medium 🔤 One Character Away

boxstation.co.uk

Leading hyphen invalidates the entire SPF policy

$ dig TXT boxstation.co.uk

;; QUESTION SECTION:

;boxstation.co.uk. IN TXT


;; ANSWER SECTION:

boxstation.co.uk. 3600 IN TXT "-v=spf1 a ip4:91.194.188.143 include:spf.protection.outlook.com ~all"

What Happened

The SPF record starts with `-v=spf1` — a leading hyphen that instantly invalidates the entire policy. Almost certainly a copy-paste that included a preceding `-` from a bullet list or command-line argument. Every mail server ignores this. Their email is unprotected.

Full TXT Record Value
-v=spf1 a ip4:91.194.188.143 include:spf.protection.outlook.com ~all