v0.3.0-beta18

Pre-release for v0.3.0. Not for production use.

New

• SPF record builder (Domain → DNS Checks → "Build SPF record"), next to the DMARC, MTA-STS and TLS-RPT builders.
  • Starts from the published record: known mail services are ticked, everything else is kept as written.
  • Tick mail services from a list of common providers (each with its documented include value), add your own includes or IP addresses and ranges, a and mx, and pick ~all or -all.
  • Counts the DNS lookups as you edit, exactly like the SPF check, and warns above the limit of 10, about includes that don't exist, and about records longer than 255 characters.
  • Suggests senders you approved in Senders that the record doesn't cover yet, when their mail uses your domain as its return address (only then does SPF on your domain apply to it).
  • Warns when a domain has more than one SPF record, and reminds you to replace the record rather than add a second one.
  • The Fixes item "SPF near lookup limit" opens the builder directly.
• The SPF check shows the published record, and when expanded, every part of it in plain words with the DNS lookups each part costs.

Improved

• Ask AI questions describe SPF fully.
  • The mail setup line lists every include, named where the service is known. Before, includes the app didn't recognize were silently left out ("SPF allows Microsoft 365" for a record that also includes another service).
  • The SPF record is now part of the DMARC pass-rate question too, not only the SPF and sender questions.
  • A failed DNS lookup is reported as "couldn't be looked up just now" instead of "none published".
  • When the app is only waiting for more reports before recommending a stricter policy, the question says so, so the answer is about waiting rather than changing records that are fine.

No database changes since beta17.