Comment by Freebytes

SPF did solve an issue. Domain impersonation is no longer as much of an issue if you are strict against SPF failures. DMARC, on the other hand, solved absolutely nothing.