> DMARC: adopted everywhere, enforced nowhere in particular

Unfortunately this only talks about what DMARC policies are published by domains. I was hoping they will go into some analysis of how many mailboxes actually hard-enforce DMARC rules on ingress (as in, respect the DMARC policy as published by the sender's domain, p=reject or whatever else it might be)

I have been hesitant to enforce DMARC rules on my server. Partly because maintaining it was a pain (see opendmarc - maybe better with rspamd now), but also because on my test runs I saw plenty of legitimate incoming mail that simply would get rejected if I were to enforce DMARC on ingress.

I suspect big players like gmail have some kind of soft enforcement/reputation/machine learning approach to DMARC, but this is way too much work for a small time admin like me.

[flagged]