0
1
00:00:11,970 --> 00:00:18,190
So Sender Policy Framework is an email validation protocol that is designed to detect and block email
1

2
00:00:18,190 --> 00:00:26,230
spoofing by providing a mechanism to allow the mail exchanges to verify that the domain that send the
2

3
00:00:26,230 --> 00:00:34,740
e-mail address is basically allowed to use the IP address to send that particular e-mails.
3

4
00:00:34,740 --> 00:00:44,430
So what SPF does here is that it ensures that the domain from where the e-mail came from is allowed
4

5
00:00:44,790 --> 00:00:49,300
to send e-mails using this particular IP address.
5

6
00:00:49,470 --> 00:00:59,940
If this validation fails it means that the e-mail is getting sent from an IP address which is not authorized
6

7
00:01:00,240 --> 00:01:03,770
to use the particular domain to send the e-mail.
7

8
00:01:03,780 --> 00:01:06,030
This is what SPF checks for.
8

9
00:01:06,120 --> 00:01:14,880
And if that particular checks fail then the e-mail exchange gives it a spam indicator that this e-mail
9

10
00:01:14,880 --> 00:01:16,700
might be suspicious.
10

11
00:01:16,710 --> 00:01:21,490
So Sender Policy Framework cross validates that the domain from where
11

12
00:01:21,530 --> 00:01:23,450
This email has been sent.
12

13
00:01:23,610 --> 00:01:26,610
It's actually registered with the correct IP address
13

14
00:01:26,610 --> 00:01:35,670
from there the e-mail came. If the match fails the e-mail client automatically says that the SPF check
14

15
00:01:35,670 --> 00:01:36,440
has failed.
15

16
00:01:36,510 --> 00:01:40,120
And this is why this e-mail was deemed suspicious.
16

17
00:01:40,140 --> 00:01:46,980
You can read a bit more about Sender Policy Framework and how it helps in categorizing whether an e-mail
17

18
00:01:46,980 --> 00:01:48,450
is spam or not.
18

19
00:01:48,450 --> 00:01:53,060
I'll be adding the next exercise on SPF into this video as well.
19

20
00:01:54,550 --> 00:02:01,240
So this is how we can understand and analyze spam emails by looking at the e-mail headers.
20

21
00:02:01,240 --> 00:02:07,390
Now in the next few videos we are going to give a deeper look into the malicious attachment that comes
21

22
00:02:07,390 --> 00:02:08,980
with these spam emails.
22

23
00:02:09,370 --> 00:02:10,900
So that's it for this video.
23

24
00:02:10,900 --> 00:02:11,800
Thanks a lot for watching.