How to safely move your DMARC policy from p=none to p=reject

Publishing a DMARC record is the easy part. Most domains do it: in a scan I ran across the top 10,000 domains earlier this year, two thirds had a DMARC record, and only about half of those actually en