How are you all handling SPF/DKIM record requests?

Posted by RNG_HatesMe@reddit | sysadmin | View on Reddit | 62 comments

Now that email sending authentication seems to be a thing, we are getting inundated with requests from users using outside services to add SPF and DKIM records so these services can send email "from" our organization. These are legitimate services (constant contact, qualtrics, someone setting up a web service managed by one of our groups), that legitimately want to send mail "as" our domain.

I've been told that there is a limit of 10 SPF lookups per domain before there may be SPF lookup failures. I'm already on 6 added SPF records on a single domain. What are you all allowing, and what are the alternatives?