Hacker News Reader

Google is easily in a position to force it unilaterally.

They already do, but unfortunately only for mass senders.

That indicates that they require it for all inbound mail, but it doesn’t yet cover outbound.

Google blocks IP literal email addresses (which is stronger than SPF and should be part of DMARC).