Support "No Email Will Be Sent" style SPF/DKIM records
As a cPanel User (and System Administrator), I would like:
To be able to mark host names as "No email will be sent from this host name" by toggling a switch in the UI which will set the SPF record to:
v=spf1 -allthe DKIM record to:
v=DKIM1; p=and the DMARC record to:
v=DMARC1;p=reject;sp=reject;adkim=s;aspf=sas recommended by CloudFlare's "How to protect domains that do not send emails" and Microsoft's "How to Handle Subdomains?" documentation (as well as others)
At the moment, using cPanel 106.0.3 , the only way to do this is to "manually edit" the zone file(s) - the "Email Deliverability->SPF->Customize" won't allow this modification and the "Email Deliverability" interface reports "Problems Exist" if these valid records are used.
the domain names and host names cannot be used for spoofing email: which will not only reduce spam in third party mailboxes, but also massively reduce the number of "bounce back/why did you spam me?" emails that could be returned in the event the hostname/domain name is used in a spoofing spam attack.