SPF (Sender Policy Framework) is an email authentication protocol that is used to verify that an email message was sent from an authorized server. DMARC builds on SPF and adds an additional layer of protection by allowing domain owners to specify how they want email messages that fail SPF and/or DKIM authentication to be handled.