Back

Sender Policy Framework (SPF)

Sender Policy Framework (SPF)

Sender Policy Framework (SPF)

Status: Retired
Published: 01/01/2016
Security level: Official
Amended / Internally developed: No
Target Audience: Technical / General
Authoring body: Government Digital Service (GDS)
Grading: no grading applied
Guidance
Abstract

This document was retired in June 2021.

Sender Policy Framework (SPF) lets you publish a DNS record of all the domains or IP addresses you use to send email. Receiving email services check the record and know to treat email from anywhere else as spam.

Using a Sender Policy Framework (SPF) in an organisation lets you publish a Domain Name System (DNS) record of all the domains or (Internet Protocol) IP addresses you use to send email. Receiving email services check the record and know to treat email from anywhere else as spam.

You can include more than one sending service in your SPF record. For example, your corporate email service and an email marketing service.

Your SPF record also contains a qualifier option, which lets you:

- tell recipients to ignore your record while you test it

- mark, but not reject, email from an unknown source

Category: Security