DMARC alignment failure: why SPF and DKIM can pass while DMARC fails

If the passing domain is not the visible From domain, the message still fails DMARC. Fix DKIM alignment first, then use SPF alignment where…