The challenge there is that SPF/DKIM are a lot harder for bigger companies with thousands of legacy servers that might be sending email. That's specifically wh

The challenge there is that SPF/DKIM are a lot harder for bigger companies with thousands of legacy servers that might be sending email. That's specifically why I wish registrars would do this because it's not a big deal for new domains with no existing real mail traffic. DMARC enforcement is getting a lot more recent momentum toward becoming an expectation, it's just a long play. The moment that Google or Microsoft decide to send any mail that doesn't pass DMARC to spam will be the moment where it's a defacto requirement.