> because DMARC is fundamentally broken and considers a message valid when either SPF or DKIM passes You can specify if you both to pass and in fact it will en

> because DMARC is fundamentally broken and considers a message valid when either SPF or DKIM passes You can specify if you both to pass and in fact it will enforce strict alignment which is more than SPF or DKIM will do on their own. I think SPF/DKIM is probably broken without strict alignment as it's trivially easy to change your mail from header which is transparent to end users and pass SPF on its own.