Home  › Email › Email Marketing

An E-Mail Marketer’s Guide to Deliverability, Part 1: SPF

  |  January 31, 2005   |  Comments

The ins and outs of anti-spam technologies -- in layman’s terms.

I admit it. Not too long ago, I understood the concept behind SPF (define), Sender ID, and DomainKeys, as well as the importance of them. But the subtleties of each eluded me. That was before Rick Buck, director of e-media and privacy/ISP relations at e-Dialog, was kind enough to translate the tech-speak surrounding these terms into plain English even a marketer could understand.

SPF, Sender ID, and DomainKeys are relatively new technologies on the cutting edge of the fight against spam and false positives. False positives, basically legitimate email messages mistaken for spam, are one of the biggest issues facing email marketers.

Overview

The goal of all these technologies is to verify a message’s sender is who he says he is. Falsifying sender addresses is a common practice among spammers. The logic: if you make it harder for spammers to hide their identities, it’s easier to hold them accountable for the email they send. This may discourage their efforts.

Though these technologies aren’t silver bullets for stopping spam, they should help diminish false positives. They’re the first steps toward a technical solution to spam, combined with reputation, authentication, and accreditation technologies.

The three technologies are somewhat hierarchical. SPF provides the most basic level of authentication. Sender ID takes it a step further, while DomainKeys offers an additional verification level. SPF is already used, most notably by America Online, to filter spam.

SPF

SPF, once known as sender permitted form, works by looking at an incoming message’s sender address and the server sending it. If the server is authorized to send email on behalf of the domain name in the sender address, the message gets through. If not, it’s filtered as spam.

SPF relies on what’s called the "envelope address," the sender address appearing as the "return-path" in the email header. It only looks at the domain name (the portion of the address after the "@"), not the complete address. SPF doesn’t confirm the message came from a specific user at that domain name, only that it came from that domain name’s server.

To get through SPF filters, senders must publicly identify servers authorized to send email from their domain name in their DNS (define) record. It’s not a time-consuming, difficult, or costly endeavor. If you send email from your own server, your IT folks should be able to handle it. If you use an email service provider (ESP) to send your bulk email, they should handle this for you.

You can also use SPF to decrease the amount of spam you receive. It’s simple for your IT folks to implement this, and there are lots of online resources to help (a few are listed at the end of this column).

If you use SPF, you won’t be alone. All the major ESPs use it, as do most major ISPs. Additionally, hundreds of thousands of organizations that send email have already published SPF records.

There’s an additional benefit to publishing your SPF record. You know all those bounces you receive from spam email that appear to be from your domain but aren’t? An ISP filtering with SPF technology won’t send them to you. It "knows" the message didn’t originate from your server.

By enabling SPF technology on your sent and received email, you’re doing your part to take email back from spammers.

SPF isn’t perfect. Many legitimate email marketers have already published their SPF records. So have many spammers. Those spam messages are authorized via SPF just as legitimate messages are.

There’s some controversy around SPF. As a traveler, I worry about tying my domain name to a single server. I use my own ISP to send mail when I’m home, and I use a patchwork of networks provided by hotels, clients, and my home away from home, Starbucks, to send mail when I travel. There’s no way to submit SPF records for all these locations and servers, especially the ones I haven’t yet visited.

SPF also appears to be incompatible with forwarding email, among other things. Still, I support SPF. I’m confident kinks like these will eventually be worked out.

This is just the tip of the SPF iceberg. If you want to learn more about the benefits, drawbacks, and details on implementing SPF for sends or as a filter, there are many resources. Wikipedia offers a good basic background and more details on the downsides of SPF. AOL does a good job of laying out SPF’s benefits, especially as they pertain to its white list. Pobox.com has more information and a wizard to help you publish your SPF record.

Next: Sender ID, which many view as an improvement on SPF but not yet perfect. Future columns in this series will discuss DomainKeys and some of the other technologies that tie delivery to reputation, authentication, and accreditation.

Want more email marketing information? ClickZ E-Mail Reference is an archive of all our email columns, organized by topic.

ClickZ Live Chicago Learn Digital Marketing Insights From Leading Brands!
ClickZ Live Chicago (Nov 3-6) will deliver over 50 sessions across 10 individual tracks, including Data-Driven Marketing, Social, Mobile, Display, Search and Email. Check out the full agenda, or register and attend one of the best ClickZ events yet!

ABOUT THE AUTHOR

Jeanne Jennings

Jeanne Jennings is one of the World's Top 50 Email Marketing Influencers (Vocus, 2014). She has more than 20 years of experience in the email and online marketing and product development world. Jeanne's direct-response approach to email strategy, tactics, and creative direction helps organizations make their email marketing initiatives more effective and more profitable. Clients include: ConsumerReports.org, FDANews, Hasbro, PRWeb, Scholastic, Verizon, and WeightWatchers. Want to learn more? Check out her blog.

COMMENTSCommenting policy

comments powered by Disqus

Get ClickZ Email newsletters delivered right to your inbox. Subscribe today!

COMMENTS

UPCOMING EVENTS

UPCOMING TRAINING

Featured White Papers

Google My Business Listings Demystified

Google My Business Listings Demystified
To help brands control how they appear online, Google has developed a new offering: Google My Business Locations. This whitepaper helps marketers understand how to use this powerful new tool.

5 Ways to Personalize Beyond the Subject Line

5 Ways to Personalize Beyond the Subject Line
82 percent of shoppers say they would buy more items from a brand if the emails they sent were more personalized. This white paper offer five tactics that will personalize your email beyond the subject line and drive real business growth.

WEBINARS

    Information currently unavailable

Resources

Jobs