quick poll for email admins: what's your current dmarc policy?
- [ ] p=none (monitoring only)
- [ ] p=quarantine
- [ ] p=reject (full enforcement)
- [ ] I don't have one yet
- [ ] i'm not sure
most of the 5.5m domains I scanned don't have one at all
if you're at p=none and unsure when to move to enforcement, the honest answer is
depends on how long you've been collecting reports and whether you've identified all your senders
