[teddyh]

> And the finally ~all means if the sender connect fullfill the rule of SPF, the email delivered should be move to trash.

No it doesn’t. “-all” would mean that. What “~all” means is that it merely suggests that the mail might be invalid.

Or, to quote RFC 7208:

A "softfail" result ought to be treated as somewhere between "fail" and "neutral"/"none". The ADMD believes the host is not authorized but is not willing to make a strong policy statement. Receiving software SHOULD NOT reject the message based solely on this result, but MAY subject the message to closer scrutiny than normal.

The ADMD wants to discourage the use of this host and thus desires limited feedback when a "softfail" result occurs. For example, the recipient's MUA could highlight the "softfail" status, or the receiving MTA could give the sender a message using greylisting [RFC6647], with a note the first time the message is received, but accept it on a later attempt based on receiver policy.