- DNS, SPF, DKIM and DMARC are mandatory
- No production use without delivery tests
- Use small test systems for experiments only
- Keep web platform and mail operation separate where possible
Practical rule
Change only as much at once as you can trace and roll back if needed.