SPF uses the deprecated ptr mechanism

Check id: spf.ptr_mechanism · fix effort: low

What it means

Your SPF record uses the ptr lookup, which is slow, unreliable, and officially discouraged. Some mail servers skip it entirely.

The technical detail

ptr is deprecated by RFC 7208 5.5. Expensive to resolve and spoofable through attacker-controlled reverse DNS.

How to fix it

  1. Replace ptr with explicit ip4/ip6 ranges or provider includes.

Does your domain have this problem?

Run a free scan, takes about ten seconds.