I worked at a company that was overloaded with phishing right when DMARC was announced and started implementing it immediately. If not for DMARC, without exagge

I worked at a company that was overloaded with phishing right when DMARC was announced and started implementing it immediately. If not for DMARC, without exaggerating at all I don’t believe that company would still be in business today. It was the only thing that really stopped the phishing directly against our domain. We built a lot of tooling for other attacks we were seeing, but that piece was critical. The trick with DMARC is that receiving email servers have no way of knowing how strictly you’ve implemented SPF and DKIM, so they guess and make their own rules unless you setup DMARC to tell them you’ve been thorough.