aspf= — SPF alignment mode

aspf=r (relaxed, the default) accepts SPF alignment as long as the domain SPF authenticated (the MAIL FROM domain) shares the same organizational/registrable domain as header_from. aspf=s (strict) requires an exact match — meaning a sending domain like bounce.example.com would no longer align with a From: of example.com.