This is a ridiculous article. First off,most orgs have an outbound mail provider that supports spf. Second, Spf can be setup to softfail (mail gets delivered an

This is a ridiculous article. First off,most orgs have an outbound mail provider that supports spf. Second, Spf can be setup to softfail (mail gets delivered anyways). I have used spf many times to distinguish forged phishing email vs phishing email originating from a compromised account. SPF is like most security solutions,its purpose is to reduce risk not eliminate it. If you really want to go down the rabbit hole of eliminating risk,your first step should be to not use email at all.