This is an automated archive.

The original was posted on /r/sysadmin by /u/mro21 on 2024-01-24 11:48:12+00:00.

So when we have a DMARC record configured, does that mean that SPF and DKIM must validate, or is it enough that either one or the other is ok (however both must not fail)?

Or does that not even have anything to do with DMARC? Probably people can choose to do whatever they want, i.e. they can probably configure their system such that 1) there must be a DMARC policy at the sender 2) SPF and DKIM must validate.

Thoughts?