[kbolino]

It seems like it's time to revise DMARC so that it requires (or at least can be configured to require) both SPF and DKIM to pass.