I would like to clarify the following scenario with DMARC, (assuming there is a publish DMARC policy):
- SPF fails
- No (aligned or any) DKIM records
Should result of DMARC check be
fail? Technically we cannot align anything with
From thus we couldn't find any aligned identifiers (because failing SPF cannot align) so we should return
none but also
If one or more of the Authenticated Identifiers align with the RFC5322.From domain, the message is considered to pass the DMARC mechanism check. All other conditions (authentication failures, identifier mismatches) are considered to be DMARC mechanism check failures.