Skip to main content

Domain health is now refreshed every day, and a flaky lookup can no longer switch a record off

Motorical

Domain health used to be refreshed only when someone read it, so the first read after a long gap could return a check that was days old.

  • Daily refresh. The daily DNS check that already watches every verified domain now also records the result for domains that pass, so emailAuthCheckedAt and cacheAgeSeconds stay within about a day for them. It never switches a record off, and it can turn DMARC on if the record appeared.
  • No switch-off on a single failed lookup. The refresh that a stale read starts in the background now looks again after a short pause before it marks DKIM, SPF or DMARC as no longer configured. Sending is blocked on those flags, and a DNS lookup can fail once and succeed a moment later. A record that really is gone is still switched off, one check later.
  • Unchanged. refresh=true still runs one live check and reports exactly what it found. A domain that fails both checks still gets the DNS drift email, once per 7 days.

Documentation changed

Tags:
Last updated on