Back Sender Policy Framework Czech Sender Policy Framework German Sender Policy Framework Spanish Sender Policy Framework French Sender Policy Framework HE Sender Policy Framework Italian Sender Policy Framework Japanese Sender Policy Framework Dutch Sender Policy Framework Polish Sender Policy Framework Portuguese
 | This article possibly contains original research. (August 2019) |
Sender Policy Framework (SPF) is an email authentication method which ensures the sending mail server is authorized to originate mail from the email sender's domain.[1][2] This authentication only applies to the email sender listed in the "envelope from" field during the initial SMTP connection. If the email is bounced, a message is sent to this address,[2] and for downstream transmission it typically appears in the "Return-Path" header. To authenticate the email address which is actually visible to recipients on the "From:" line, other technologies such as DMARC must be used. Forgery of this address is known as email spoofing,[3] and is often used in phishing and email spam.
The list of authorized sending hosts and IP addresses for a domain is published in the DNS records for that domain. Sender Policy Framework is defined in RFC 7208 dated April 2014 as a "proposed standard".[4]
- ^ "Sender Policy Framework: Introduction". Archived from the original on 2019-02-22.
- ^ a b Cite error: The named reference
Carranza, DigitalOcean, 2013was invoked but never defined (see the help page). - ^ Cite error: The named reference
:1was invoked but never defined (see the help page). - ^ RFC7208 Status