How does it work?

• The domain owner publishes an SPF record in DNS identifying authorized sending mail servers for their domain

• When a mail server receives a message claiming to be from that domain:

• • It looks up the sending domain’s SPF record in DNS
  • Checks to see if the sending server is authorized by the sending domain’s policy
  • If the message comes from an unauthorized server, it can be considered a forgery