Somebody can verify that gmail's SPF and DMARC records are:
"v=spf1 include:_netblocks.google.com include:_netblocks2.google.com include:_netblocks3.google.com ~all"
"v=DMARC1; p=none; sp=quarantine; rua=mailto:email@example.com"
So no action is taken for emails coming from gmail.com when DMARC is failed.
Taking into consideration that their spf is soft failing, shouldn't that make gmail easy target for spoofing?
Is there a reason for that particular (mis)configuration?