Glossary
DMARC
The policy published in DNS that says what to do with an email that fails SPF and DKIM, and where to send the reports.
DMARC (Domain-based Message Authentication, Reporting and Conformance) builds on SPF and DKIM. Published at _dmarc.your-domain.com, it tells recipients what to do with an email that fails both: let it through (p=none), send it to spam (p=quarantine) or reject it (p=reject), and which address to send reports to. You start in monitoring mode, with p=none, before tightening the policy.