Yes lots of sites have SPF, but what I've seen most sites set it to soft-fail mode. I think this is because SPF is still sometimes broken in practice. For exam

Yes lots of sites have SPF, but what I've seen most sites set it to soft-fail mode. I think this is because SPF is still sometimes broken in practice. For example, it can fail when there are misconfigured e-mail forwarding (e.g. mail aliases) at _other_ peoples servers[1]. Or with web forms that set the envelope sender to the "From" field in web page... http://en.wikipedia.org/wiki/Email_forwarding#Forwarding_versus_remailing http://en.wikipedia.org/wiki/Email_forwarding#Forwarding_ver...