Home/Notes/What a plant nursery needs to know about SPF
What a plant nursery needs to know about SPF
3 Jul 2025
How a plant nursery deals with SPF — and what usually goes wrong.
The problem: a certificate that expires on a Sunday. The SPF check fails for a plant nursery.
a plant nursery did not want to hear about SPF. They wanted to know: will the site work tomorrow morning. The answer was yes, but only if we fix a certificate that expires on a Sunday today.
HTTPS is table stakes, but SPF is where trust actually lives for a plant nursery. A padlock with a misconfigured record behind it is decoration, not security.
Most of the damage we see in SPF comes from doing too much. A single correct record beats three that were supposed to be clever.
Before you touch SPF, take a screenshot of the current state. Half of our emergency calls come from people who cannot remember what was there before the change.
When we reviewed SPF, the DNS panel showed a certificate that expires on a Sunday. Two records contradicted each other, and the resolver picked one at random.
We found a certificate that expires on a Sunday during a routine check of SPF. The site had been leaking referrer data for six weeks before anyone noticed.
We checked the WHOIS for a plant nursery and found the domain was registered under a former employee. Transferring it took more time than fixing SPF.
Related notes
Tell us what you need.
Write a few lines about your project. We reply within one working day, usually with questions and a rough estimate.
hello@digitalserved.com