DNS Records for Domains Without Email

Often, I need to quickly set up a website for someone who is not using email at the moment (or may never). These are the DNS records I add in order to help prevent spam. Note: Do not set these if you need to send email from the website, like from a contact form, registration system, or shopping cart.

TypeHostAnswer
TXT@v=spf1 -all
TXT*._domainkey.<your_domain>.comv=DKIM1; p=
TXT_dmarc.<your_domain>.comv=DMARC1;p=reject;sp=reject;adkim=s;aspf=s

And as a reminder to myself, besides the A record, I also always add a record to handle www:

TypeHostAnswer
CNAMEwww<your_domain>.com