@Jerry@hear-me.social Nitpick: SPF record is not named “@”, it just needs to be at apex of zone. @ is often a shorthand to say apex in zonefiles, but doesn’t exist as such really in DNS queries and answers. Also, if you want to fully protect your domain, you can have a null MX record (RFC 7505) and for other matters than email, but also still important, a null CAA record to prevent any rogue certificates issued for it.
@Jerry@hear-me.social Nitpick: SPF record is not named “@”, it just needs to be at apex of zone. @ is often a shorthand to say apex in zonefiles, but doesn’t exist as such really in DNS queries and answers. Also, if you want to fully protect your domain, you can have a null MX record (RFC 7505) and for other matters than email, but also still important, a null CAA record to prevent any rogue certificates issued for it.