SPF and DKIM both help authenticate email in different ways but do not enforce a policy. DMARC uses the authentication that both SPF and DKIM provide to enforce a policy and block sending from any source that fails this validation.
Where does SPF and DKIM fit into DMARC?
SPF and DKIM needed for DMARC protection.
Written by Ivan