Having recently installed Exchange 2003 SP2, I thought I'd have a look at the Sender ID filtering. It seems to me that unless you can be sure that all domains that send you email are legit and have valid SPF records then this can not be safely used. Or am I not understanding this correctly? Does anyone have any figures on how widespread usage of SPF records are? Is anyone on the list using Sender ID? Any comments, problems etc?