Ask the Community
Groups
Does SPF protect the "From:" header field? - Connect IT Community | Kaseya
<main> <article class="userContent"> <div> <p>The short answer is No.</p> <p>SPF was designed to protect the envelope sender. That means the <em>return-path</em> that shows up in "MAIL FROM", and to a lesser extent the <em>HELO</em> argument that is supposed to be an FQDN - fully qualified domain name. </p> </div> <p>The vast majority of SPF implementations today use the <em>return-path</em> as the subject of authentication and do not get involved with the header "From:”.</p> </article> </main>