You can also tighten down SPF to only allow specific email address to send from third party services instead of whole domain : https://www.jamieweb.net/blog/using-spf-macros-to-solve-the-operational-challenges-of-spf/
You can also tighten down SPF to only allow specific email address to send from third party services instead of whole domain : https://www.jamieweb.net/blog/using-spf-macros-to-solve-the-operational-challenges-of-spf/