requests no specific action be taken
Practical tip: start with p=none and a rua address so you can read the aggregate reports for a couple of weeks. Once every legitimate sender (your mail server, newsletter tool, CRM, helpdesk) passes SPF or DKIM with alignment, move to quarantine with pct=25, then 100, then reject. Jumping straight to reject is the most common way people lose their own invoices and password-reset emails.
To ensure your messages pass the DMARC check with flying colors, you'll need to make certain the domains listed in the From, Sender, and Mail-From headers match each other exactly. That is, the domain listed in the From header is the exact actual sending domain.
For example, if your sending domain is ABCdomain.com, but your From field shows 123domain.com instead, you will almost certainly run into DMARC issues. Sometimes, even the difference between mail.ABCdomain.com and ABCdomain.com is sufficient for a server to place your message in a spam folder. We make sure that our Email Best Practices are clear that the domain listed in the From header and the actual sending domain should match for exactly this reason.
```bash $ nslookup -type=txt default._bimi.dropbox.com
text = "v=BIMI1; l=https://cfl.dropboxstatic.com/static/images/logo_catalog/dropbox_logo_glyph_m1_bimi.svg;" ```