The online whiteboard of Kristofer Palmvik
Almost everything looked legitimate and Google even placed it with other legitimate security alerts, which would likely trick less technical users that don’t know where to look for the signs of fraud.
This document covers best practices for how to properly construct and maintain an SPF record, as well as common errors and unintended consequences
This issue will only be resolved if Google redesigns the responses generated by these buttons to use a Google domain in the Header From address or if these messages are sent in a way that would not be subject to a DMARC check.
SPF macros, a seldom used yet widely supported feature of the SPF specification, provide a potential solution to some of these challenges. This article includes an introduction to SPF macros, as well as several examples of how they can be used to solve the various operational complications that SPF so often poses.