Comment Re:A possible use for example.com (Score 1) 286
SPF policies apply only to the envelope sender address, not the message's From: header.
Most of the time, the email address in the "From:" header gets copied to the envelop "from". And, most importantly in this case, the envelop "from" is where bounces get sent to, so the bounces he receive could have been stopped if he had published an SPF record *and* everyone checked it.