[LoSboccacc]

you can check that the envelop and message sender header match at the mx level and let spf handle the rest

[networkimprov]

There is no authentication of the John Doe part of

   John Doe <[e-mail]>

[LoSboccacc]

DMARC