Email authentication checks are now more dependable in networks where the local DNS resolver is unreliable. This helps you trust warnings about SPF and DMARC configuration, instead of chasing issues caused by DNS hiccups.
Stability Updates
When SPF or DMARC TXT lookups fail due to system resolver problems like timeouts or server errors, the check now retries using a public DNS resolver. This reduces false WARN results caused by flaky routers or DNS setups.
If the system resolver returns a genuine “not found” response, that result is still trusted and is not retried. This keeps missing-record warnings accurate and avoids masking real configuration gaps.