It has been suggested on-list that perhaps SPF should be dropped as an underlying protocol for DMARC, or that perhaps the DMARC mechanism should be modified in various ways such that an aligned SPF pass (or fail) by itself does not make for a DMARC pass (or fail).
It has been suggested on-list that perhaps SPF should be dropped as an underlying protocol for DMARC, or that perhaps the DMARC mechanism should be modified in various ways such that an aligned SPF pass (or fail) by itself does not make for a DMARC pass (or fail).
Starting points for some threads on the topic: