Embed Notice

@beasts AFAIK DMARC doesn't normally require that the envelope sender passes SPF if From: is DKIM signed by the domain of the From: (what 'alignment' normally means in this context). We (a university department) successfully forward a lot of DKIM signed email to GMail despite not touching the envelope sender (so no SPF passing).

(People can creatively make their email non-forwardable (at least not easily) by having a narrow SPF and then no DKIM signature.)