content: You may think so, but I've been responsible for more than one e-mail system handling HIPAA data and the lawyers always told us that as long as a person isn't doing the SPF, we have nothing to worry about. You may think you know how it works on paper, unfortunately it's not practiced in the real world.