Cybersecurity glossary
What is SPF?
Also known as: Sender Policy Framework
Definition
SPF (Sender Policy Framework) is a DNS record listing the servers allowed to send email for a domain.
Why it matters
Receivers check the sending server against the SPF record of the envelope sender domain. SPF records are limited to 10 DNS lookups, so domains with many sending services need to keep them tidy. SPF works with DKIM and DMARC.
Common questions about SPF
See also
Sources
Related Guides
GuideGRC
How to Write a Data Retention Policy: A Step-by-Step Guide
Learn how to write a data retention policy that aligns with GDPR and the NIST Privacy Framework. Define schedules, disposal rules, and audit controls.
Read more GuideGRC
How to Build a Security Policy Framework: Policies, Standards and Procedures That People Follow
A practical guide to writing, approving and maintaining information security policies: the policy hierarchy, the core policy set, ownership, review cycles and how to prove people follow them.
Read more GuideSmall Business Security
Business Email Compromise: How It Works and How to Stop It
Learn how business email compromise attacks target finance teams and discover concrete controls, verification rules, and policies to protect your company.
Read more GuideGRC
How to Create an Acceptable Use Policy for Employees
Learn how to create an acceptable use policy for employees. This step-by-step tutorial covers scope, permitted use, prohibited actions, and enforcement.
Read more