SPF Resources

SPF Technology Centers

SPF: Sender Policy Framework, hosted by Meng Weng Wong, CTO of POBox.com. Documents, wizards, downloads. http://spf.pobox.com/

Sender ID, hosted by Microsoft. Documents, wizards, downloads. http://www.microsoft.com/senderid

SPF Wiki at InfinitePenguins.Net contains lots of information about SPF as well as several tools: SPF Check, Adoption Roll and Validator, and E-Mail Header Checker. http://spfwiki.infinitepenguins.net/wiki/SenderPermittedFrom/HomePage

SPF Wizards

• SPF Setup Wizard from POBox.com.
  http://www.sfp.pobox.com/wizard.html
• Sender ID Framework SPF Record Wizard from Microsoft.
  http://www.anti-spamtools.org/SenderIDEmailPolicyTool/Default.aspx

Selected Articles and Documents on SPF

"An Interview with the Lead Developer of SPF," Circle ID, June 29, 2004. Interview with Meng Weng Wong, lead developer of the Sender Policy Framework (SPF) which is used by some larger ISPs to check that the purported sender hasn't been spoofed. The interview in 2 parts provides background on various technologies and differentiates between Microsoft's Sender ID proposal and SPF. The interview is well done and Meng Weng an excellent spokesman for SPF. http://www.circleid.com/article/634_0_1_0_C/

"Sender Authentication Deployment Recommendations," Sendmail, November 2004. They say, "Publish SPF/Sender ID records for all of your domains. These should end in ~all (soft fail) to avoid over-zealous rejection of messages that have their authentication broken due to unexpected forwarding by receivers." http://www.sendmail.net/tools/Sendmail_Auth_Reco_wp.pdf

Jonathan de Boyne Pollard, "SPF is harmful. Adopt it." This is a techie's rant against SPF, for those who want to look at all the pros and cons. I feel that SPF will help us to some degree to combat spam now, but is only an interim step.