{"id":26324,"date":"2024-02-24T05:12:29","date_gmt":"2024-02-24T05:12:29","guid":{"rendered":"https:\/\/help.desk365.io\/en\/?post_type=docs&p=26324"},"modified":"2026-03-16T07:55:24","modified_gmt":"2026-03-16T07:55:24","slug":"email-domain-verification-using-spf","status":"publish","type":"docs","link":"https:\/\/help.desk365.io\/en\/articles\/email-domain-verification-using-spf\/","title":{"rendered":"Email domain verification using SPF"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t
\n Available with:<\/span>\n \n \n \n <\/circle>\n <\/path>\n <\/svg>\n Standard<\/span>\n <\/span>\n \n |<\/span>\n \n \n \n <\/circle>\n <\/path>\n <\/svg>\n Plus<\/span>\n <\/span>\n \n |<\/span>\n \n \n \n <\/circle>\n <\/path>\n <\/svg>\n Premium<\/span>\n <\/span>\n<\/div>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Business owners aiming to <\/span>establish<\/span> trust with their customers and fortify them against <\/span>cyber-attacks<\/span>, such as <\/span><\/span>email spoofing<\/span><\/span><\/a>, can <\/span>utilize<\/span> Email Domain Verification using SPF (Sender Policy Framework). This guide will walk you through what SPF is, how it works, and how to set it up within <\/span><\/span>Desk365<\/span><\/span> to ensure secure and trusted email communication.<\/span><\/span>\u00a0<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

What is SPF?<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

SPF, or Sender Policy Framework, is an email validation standard designed to combat email spoofing. It enables domain owners to specify which servers <\/span>are authorized to<\/span> send emails on behalf of their domain. By publishing SPF records in the DNS (Domain Name System), organizations can prevent their outgoing messages from being flagged as spam by recipient servers.<\/span><\/span>\u00a0<\/span>
<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

How does SPF work? <\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Sender Policy Framework (SPF) is a crucial mechanism in email authentication, designed to prevent email spoofing and unauthorized use of domain names. Let’s delve into a detailed explanation of how SPF operates:<\/span>\u00a0<\/span><\/p>

1. Publishing SPF record<\/span><\/b>\u00a0<\/span><\/p>

Domain owners initiate the SPF process by publishing an SPF record in the Domain Name System (DNS) configuration for their domain. This SPF record serves as instructions for email receivers, specifying which “Custom Mail from Domain” provided by Amazon SES <\/span>are authorized to send emails via your custom support email.<\/span>\u00a0<\/span><\/p>

The Amazon SES maintains a list of IP addresses from which your email can be sent, <\/span>essentially creating a whitelist of authorized IP addresses. The process to get the IP addresses for Amazon SES is explained in this article<\/a>.<\/span><\/span><\/p>

2. Verification process<\/span><\/b>\u00a0<\/span><\/p>

When an email is sent, the recipient’s mail server performs a series of checks to determine its legitimacy. One of these checks involves querying the SPF record for the custom support email which was set up in Amazon SES.<\/span>\u00a0<\/span><\/p>

The receiving mail server retrieves the SPF record from the DNS, seeking authorization information regarding the IP addresses permitted to send emails on behalf of the sender’s custom support email.<\/span>\u00a0<\/span><\/p>

3. Matching process<\/span><\/b>\u00a0<\/span><\/p>

Upon retrieving the SPF record, the receiving mail server compares the IP address of the sender with the list of authorized senders specified in the SPF record.<\/span>\u00a0<\/span><\/p>