What's the difference between -all and ~all in SPF?

Minus all is a strict failure, meaning the domain explicitly forbids all other senders.

Tilde all is a softfail, meaning the domain signals suspicion but not certainty.

Minus all is a firm port closure. Tilde all is a warning flag raised at the harbor entrance.

Was this answer helpful?

Thanks for your feedback!