I have three domains registered with GoDaddy, and I'm using Microsoft 365 for my email through them. Recently, a Gmail user reported issues related to DKIM, and I'm feeling a bit overwhelmed trying to set everything up correctly. Here are my main questions:
1. For SPF records, I found that GoDaddy suggests it should automatically be 'v=spf1 include:secureserver.net -all', but two of my domains are showing 'spf.protection.outlook.com'. Why are there different records, and should I unify them?
2. I've set up DKIM following the guide provided by GoDaddy for all three domains. Is there any risk of issues stemming from the differing SPF records I mentioned earlier?
3. I'm planning to implement DMARC based on GoDaddy's guide. The step about 'verifying your IP address against the owner of your domain' makes me hesitant since I want to ensure I can send emails from various devices. Should I proceed?
2 Answers
If Microsoft 365 is your only email service for these domains, I recommend standardizing on the outlook.com SPF record for consistency.
To start off with DMARC, try enabling it in report-only mode to gather insights without any risk. You can send the reports to an email processing service like Urireports. As for DKIM, enabling it won’t cause any issues if your DMARC is still inactive, so go ahead and set it up. Regarding SPF, list your primary services and keep an eye on the DMARC reports to identify any blocked emails.
Thank you, I'll get started on that!

Thanks! Just to clarify, setting up Microsoft 365 mail on different devices doesn’t count as using other services, right? So I can go for the spf.protection.outlook.com record?