To clarify: The false positives/negatives are for the spam filter, not DMARC specifically. My DMARC policy is lenient, so it only ever creates reports that I d

To clarify: The false positives/negatives are for the spam filter, not DMARC specifically. My DMARC policy is lenient, so it only ever creates reports that I don't read, it never filters. False positive: A legit email ends up in my spam folder. False negative: A spam email ends up in my inbox. I check my spam folder occasionally, so that's how I count false positives. As far as I understand from this thread, maintaining a DMARC policy set makes more sense for bigger companies that have a lot of automated email traffic and a lot of consistently shaped traffic between larger groups. My Microsoft email at work is full of useless notifications because we don't have policies set up that whitelist our main customers or even our own automated tools. ("You don't often get emails from Jira!" -- if only.)