DMARC Has Been Public Since 2012. 68.4% of Domains Still Don't Enforce It | Hacker News

A Hacker News thread debated a report that most domains still do not enforce DMARC.

Some commenters called DMARC essential infrastructure, while others argued it offers only limited protection against spam and phishing.

Examples were raised of legitimate customer mail being blocked and spam still getting through SPF/DKIM/DMARC checks.

Forwarding and the behavior of major providers like Outlook, Gmail, and Microsoft 365 were cited as sources of authentication friction and false positives.