DMARC quarantine vs reject

p=quarantine asks receiving systems to treat mail that fails DMARC as suspicious. The receiver decides the final handling, which may include a spam or junk folder.

p=reject is the strongest DMARC policy. It asks receiving systems to reject mail that fails alignment and authentication.

Both policies should follow sender discovery and authentication work so legitimate messages are not unintentionally affected.