Should SPF Be Kept As An Underlying Protocol for DMARC?

[toddherr]

It has been suggested on-list that perhaps SPF should be dropped as an underlying protocol for DMARC, or that perhaps the DMARC mechanism should be modified in various ways such that an aligned SPF pass (or fail) by itself does not make for a DMARC pass (or fail).

Starting points for some threads on the topic:

• https://mailarchive.ietf.org/arch/msg/dmarc/2CcO17K8QcOmTORHl3_isQBm_RE/
• https://mailarchive.ietf.org/arch/msg/dmarc/ENz8XOsBs-3vZWTGMDW5HYmHYs8/
• https://mailarchive.ietf.org/arch/msg/dmarc/YtBTThYLY1D-Qs53Xk1sWwXk1xI/
• https://mailarchive.ietf.org/arch/msg/dmarc/p4yFLKWTCjmoR7XbOiOY6P7OoiM/

[toddherr]

SPF is being kept as an underlying protocol for DMARC. Mail Receivers are free to prefer or emphasize DKIM over SPF as they wish.