Sender Policy Framework (SPF) for Authorizing Use of Domains in E-Mail, Version 1

Document Type Replaced Internet-Draft (spfbis WG)
Last updated 2012-07-19 (latest revision 2012-06-13)
Replaced by draft-ietf-spfbis-4408bis
Stream IETF
Intended RFC status (None)
Expired & archived
plain text pdf html
Stream WG state WG Consensus: Waiting for Write-Up
Doc Shepherd Follow-up Underway
Document shepherd No shepherd assigned
IESG IESG state Replaced by draft-ietf-spfbis-4408bis
Telechat date
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at


E-mail on the Internet can be forged in a number of ways. In particular, existing protocols place no restriction on what a sending host can use as the reverse-path of a message or the domain given on the SMTP HELO/EHLO commands. This document describes version 1 of the Sender Policy Framework (SPF) protocol, whereby a domain may explicitly authorize the hosts that are allowed to use its domain name, and a receiving host may check such authorization.


D. Kitterman (

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)