I have a lot of experience managing spam filters for fairly busy domains. I have about 150 domains whitelisted because they are trusted business contacts that H

I have a lot of experience managing spam filters for fairly busy domains. I have about 150 domains whitelisted because they are trusted business contacts that HARDFAIL SPF and blocking their email is a total nonstarter for the organisation. An extraordinary amount of legitimate email soft fails SPF. I really would like such senders to start being punished for this - but at present, it just isn't feasible unless you have a very small domain and are happy to comb through quarantines.