Sender Policy Framework (SPF) for Authorizing Use of Domains in E-Mail, Version 1

Metadata

Publisher: IETF
Doc Type: Experimental
Pages: 48
Abstract: E-mail on the Internet can be forged in a number of ways. In particular, existing protocols place no restriction on what a sending host can use as the reverse-path of a message or the domain given on the SMTP HELO/EHLO commands. This document describes version 1 of the ender Policy Framework (SPF) protocol, whereby a domain may explicitly authorize the hosts that are allowed to use its domain name, and a receiving host may check such authorization. This memo defines an Experimental Protocol for the Internet community.
Publication Date: 2006-04-01
Status Note: Experimental
DOI: 10.17487/RFC4408
Link: https://doi.org/10.17487/RFC4408
Author(s): Meng Weng Wong
Wayne Schlitt
Keyword(s): Spoofing, SPF

Latest version of IETF RFC 4408

Document Versions — IETF RFC 4408

▶ IETF RFC 4408 (2006-04-01)

THIS DOC [SUPERSEDED] [LATEST VERSION]

Superseded by:

RFC7208 NOT IN REGISTRY

Amended by:

RFC6652 NOT IN REGISTRY

Normative Reference(s)

INCITS.X3.4.1968 — 1 EXTERNAL
IETF RFC 1035 [Active, Amended*]
IETF RFC 1123 [Active*]
IETF RFC 2119 [Active*]
IETF RFC 2821 [Superseded*]
IETF RFC 2822 [Superseded*]
IETF RFC 3464 [Active*]
IETF RFC 3513 [Superseded*]
IETF RFC 3864 [Active*]
IETF RFC 3986 [Active, Amended*]
IETF RFC 4234 [Superseded*]

Bibliographic Reference(s)

Danish, H., "The RMX DNS RR Type for light weight sender authentication", Work In Progress EXTERNAL
Vixie, P., "Repudiating MAIL FROM", 2002. EXTERNAL
Fecyk, G., "Designated Mailers Protocol", Work In Progress EXTERNAL
Green, D., "Domain-Authorized SMTP Mail", 2002. EXTERNAL
IETF RFC 1034 [Active*]
IETF RFC 1983 [Active*]
IETF RFC 2440 [Superseded*]
IETF RFC 2554 [Superseded*]
IETF RFC 3696 [Active*]
IETF RFC 3833 [Active*]
IETF RFC 3851 [Superseded*]
IETF RFC 4409 [Superseded*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC4408.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 4408, Sender Policy Framework (SPF) for Authorizing Use of Domains in E-Mail, Version 1. Available at https://doi.org/10.17487/RFC4408

Snippet:

IETF RFC 4408, Sender Policy Framework (SPF) for Authorizing Use of Domains in E-Mail, Version 1. Available at https://doi.org/10.17487/RFC4408

HTML (ISO 690 compliant)

Preview:

IETF RFC 4408, Sender Policy Framework (SPF) for Authorizing Use of Domains in E-Mail, Version 1. Available at https://doi.org/10.17487/RFC4408

Snippet:

<span class="citation"><cite>IETF RFC 4408</cite>, Sender Policy Framework (SPF) for Authorizing Use of Domains in E-Mail, Version 1. Available at <a href="https://doi.org/10.17487/RFC4408" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4408</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 4408, Sender Policy Framework (SPF) for Authorizing Use of Domains in E-Mail, Version 1
doi: 10.17487/RFC4408
url: https://doi.org/10.17487/RFC4408

Snippet:

<li>
<cite id="bib-rfc4408">IETF RFC 4408</cite>, Sender Policy Framework (SPF) for Authorizing Use of Domains in E-Mail, Version 1
<span class="doi">10.17487/RFC4408</span>
</li>

Referenced By

IETF RFC 5321 [Active*]