SPF
Also called: Sender Policy Framework
Sender Policy Framework: a DNS record in which a domain lists the mail servers allowed to send on its behalf, so receivers can check where a message came from. Include every third-party service that sends for you, such as newsletter, CRM and help-desk platforms. SPF alone does not stop spoofed senders; pair it with DKIM and DMARC.
Further reading: www.rfc-editor.org
From the Security Academy
SPF, DKIM and DMARC Deployment Guide: Stop Others Sending Mail as Your Domain
Inventory every sender, set up SPF and DKIM, move DMARC from none to reject in stages, lock down unused domains, and meet Gmail, Yahoo and Outlook.com rules.
15 min read ·
Phishing and Business Email Compromise (BEC): Spotting and Stopping It
Common phishing and BEC techniques, from credential theft and AiTM session hijacking to fake vendor bank changes, plus SPF/DKIM/DMARC and payment verification.
8 min read ·
Advisories that mention this term
FortiOS fixes three Critical flaws, one allowing unauthenticated super-admin command execution in certain HA setups
Fortinet disclosed FortiOS flaw CVE-2026-126259 on November 10, 2026: on devices using HA FGSP with standalone-config-sync or autoscale, an unauthenticated attacker can send crafted HA packets to run commands as super admin, rated Critical with CVSSv3 9.