diff --git a/sfe/overrides.go b/sfe/overrides.go
index fd7589e60..abbbb8e1b 100644
--- a/sfe/overrides.go
+++ b/sfe/overrides.go
@@ -15,6 +15,7 @@ import (
 	emailpb "github.com/letsencrypt/boulder/email/proto"
 	berrors "github.com/letsencrypt/boulder/errors"
 	"github.com/letsencrypt/boulder/iana"
+	"github.com/letsencrypt/boulder/identifier"
 	"github.com/letsencrypt/boulder/policy"
 	rl "github.com/letsencrypt/boulder/ratelimits"
 	"github.com/letsencrypt/boulder/sfe/forms"
@@ -347,7 +348,11 @@ func validateOverrideRequestField(fieldName, fieldValue, rateLimit string) error
 		return nil
 
 	case emailAddressFieldName:
-		err := policy.ValidEmail(fieldValue)
+		pa, err := policy.New(map[identifier.IdentifierType]bool{"dns": true}, nil, nil)
+		if err != nil {
+			return fmt.Errorf("cannot create policy authority implementation for email")
+		}
+		err = pa.ValidEmail(fieldValue)
 		if err == nil {
 			return nil
 		}
@@ -373,7 +378,11 @@ func validateOverrideRequestField(fieldName, fieldValue, rateLimit string) error
 		return fmt.Errorf("IP address is invalid")
 
 	case RegisteredDomainFieldName:
-		err := policy.ValidDomain(fieldValue)
+		pa, err := policy.New(map[identifier.IdentifierType]bool{"dns": true}, nil, nil)
+		if err != nil {
+			return fmt.Errorf("cannot create policy authority implementation")
+		}
+		err = pa.ValidDomain(fieldValue)
 		if err != nil {
 			return fmt.Errorf("registered domain name is invalid")
 		}
