TLDR: DMARC alignment checks that the domain in your email’s visible “From” address matches the domain that passed SPF or DKIM. DMARC passes if either one aligns, you don’t need both. Alignment has two modes: relaxed, the default, which matches at the organizational-domain level so subdomains count, and strict, which demands an exact domain match. Your email can pass SPF and DKIM and still fail DM...