Our outbound emails keep going to junk folders

[enjay]

I think the metaphor here is:

 

You go out for the day. Someone breaks into your house and pretends to be you. A milkman knocks on the door and asks the person there if they're interested in milk delivery. The person at the house pretending to be you says "Yes".

 

If the milkman has SPF/DKIM/DMARC, he says "Great, can I have some ID please?". The person at the door either dithers and says "no", or the ID that he has doesn't match, it either isn't his or the address on his ID is wrong. The milkman says "LOL NO" and moves on.

 

If the milkman doesn't have SPF/DKIM/DMARC, he takes the person at the house at his word and signs the household up for the service.

 

Your analogy is the wrong way round, isn't it, as the "identity theft" isn't happening at my front door, it is happening at yours - you have received something through the post which claims to be from me and you want a way of checking it really did come from me and not someone else who just wrote my details on the back of the envelope. So I think a better analogy would be Caller ID on phones. Someone phones me up and says "Hi, I'm from HMRC, I need your credit card number to settle an outstanding tax debt", and I can see from the caller ID the person is actually on a mobile or in another country. So, SPF/DKIM/DMARC doesn't stop someone breaking into HMRC and phoning me from there, but it does make it harder for someone to call convincingly from elsewhere.