Today I learned that a DMARC quarantine/reject policy doesn’t play nice with Gmail (Google Workspace, in this case) aliases. The process of discovering it and working it out was not pleasurable.