Blog Post
Strengthening Email Ecosystem: Outlook’s New Requirements for High‐Volume Senders
What Does “Temperror” Mean in SPF or DKIM?
If you're seeing temperror in SPF or DKIM results, it means the receiving email server couldn’t complete the authentication check because of a temporary DNS issue. This is not a permanent failure, but it can still impact email delivery.
What Causes It
SPF temperror may happen due to:
- DNS timeout or the DNS server is down
- Too many DNS lookups (limit is 10)
- Invalid or unreachable SPF includes
DKIM temperror may happen due to:
- The public key can’t be retrieved from DNS
- Wrong DKIM selector or malformed DNS record
- DNS provider is temporarily unavailable
Why It Matters
- Emails may be delayed, flagged, or marked as suspicious
- DMARC might fail if both SPF and DKIM checks can't be completed
- Repeated temperrors can damage sender reputation
How to Fix It
- Use tools like MXToolbox or dig to test DNS records
- Keep SPF within the 10-lookup limit
- Verify that DKIM records are correct and accessible
- Choose a reliable DNS provider with low latency
Summary
SPF and DKIM temperrors are temporary issues that stop email authentication from completing. They don’t cause immediate rejection, but they can reduce email deliverability and trust. Fixing them ensures reliable authentication and protects your domain’s reputation.
Let me know if you'd like a downloadable or shareable version.
Not sure if this is the case, there are several reports by other people,
https://learn.microsoft.com/en-us/answers/questions/2278218/spf-dkim-failures-from-external-sender-to-ms-outlo
https://answers.microsoft.com/en-us/outlook_com/forum/all/dkim-timeout-in-the-mails-sent-to-hotmailcom-from/a5675f09-a143-45ad-9264-fde30849102b#:~:text=Here%20are%20some%20suggestions%20for%20you%20to%20consider%3A,and%20public%20keys%20match%202.%20Verify%20DNS%20Records
Also someone shared this mentioning outlook.com has acknowledge this in past but no referring article was attached.
https://www.uriports.com/blog/outlook-com-dkim-temperror-in-dmarc-reports/
People who are using 3rd party mail services like sendgrid might not even know unless someone looks into bounce rates or have dmarc aggregate reports that would uncover this issue. Randomly outlook.com is giving temperror for long time now.
And the question i have is, due to this temperror, and the new requirements, would they reject emails?