No longer receiving emails from msn accounts. All other email is received.

Hello and thank you for your response. Since I receive email from everyone except Microsoft accounts, this makes absolutely no sense to me.

I have what might be an unusual setup. My domain name is registered with GoDaddy. My website is hosted on FASO (Fine Art Studios Online) and six weeks ago, I added Cloudfare to the mix, to prevent or inhibit image mis-appropriation. (It's hard enough being an artist without also having to worry about theft.) When I added Cloudfare, I transferred the DNS records over to Cloudfare while keeping the registration at GoDaddy. Also, I have my Microsoft 365 subscription through GoDaddy.

At first everything worked fine, including receiving emails from MSN and/or Hotmail accounts. At some point, that changed; I can't explicitly state when because I don't honestly receive all that many emails from MS email accounts.

When the problem was first noted, I checked with GoDaddy and they gave me the email records (Mx, etc.) which I confirmed. My website works fine and there is a DNS record for FASO.

I hope this helps and thank you in advance for any insight.

And, if I send an email to myself, i.e., MS 365 account, it arrives just fine.

Hi @Mike DeCesare | ProPhotoNorthwest

Thank you for your responding.
Based on my research, this issue appears to be related to DNSSEC configuration. Microsoft’s outbound mail servers use DNS resolvers that strictly validate DNSSEC, whereas many other providers either do not validate DNSSEC as aggressively or had cached your previous (pre-Cloudflare) DNS responses before the mismatch became visible. Once those caches expired, their servers resolved correctly, but Microsoft’s servers immediately encountered with SERVFAIL.

When you moved the nameservers from GoDaddy to Cloudflare six weeks ago, any existing DNSSEC DS records at GoDaddy became invalid. Those old DS records still indicate the zone is signed, but Cloudflare is now serving unsigned responses (unless DNSSEC was explicitly enabled in Cloudflare and the new DS records were added back to GoDaddy).

Currently, as forum moderators, we don’t have access to the systems required to troubleshoot this effectively. My role focuses strictly on Microsoft technologies, and I don’t have access to backend systems or resources to investigate third-party configurations. I recommend reaching out to Cloudflare to properly configure DNSSEC.

I truly appreciate your patience and understanding.

If you need further assistance, please let us know.

Warm thanks, and have a great day.

Thank you very much for your insights and suggestions.