I have a CNAME record set on a domain like “domain.com”. I would like to use this same domain to send emails, but due to RFC limitations, I cannot set any type of TXT record on that domain. One solution could be to use the third-level domain “@mail.domain.com” for sending emails, setting the SPF1 record on that domain. However, if I want to make the second-level domain “domain.com” a “non-sending domain”, I would have the same problem as before, being unable to set the “spf1 -all” policy because of the existing CNAME. What can I do?
Welcome to the dmarcian forum.
Setting a CNAME at the apex like that violates the RFCs for exactly the reason you describe. The solution is to use A/AAAA records or move to a DNS provider that offers CNAME flattening or ANAME records.
1 Like
