Sorry, I got tangled up in the weeds between policy scope and alignment.
The four policy assertions should have been phrased as:
For messages with FROM within ,
· All messages with MAILFROM algined to FROM will produce SPF PASS,
at first hop.
· All messages with MAILFROM aligne
If we are willing to break upward compatibility, it might be preferable to
define policy in terms of what the sender knows, rather than what the
receiver should do. After collecting feedback, the sender should know
whether all message sources are sending with SPF PASS, DKIM PASS, or both.
This