[paultopia]

You'd think that they'd have a non-domain-based way to do it, like cryptographically signing their own damn emails with a key embedded in outlook or something.

[Twisell]

I've seen perfectly nice SPF/DKIM/DMARC valid message being silently rejected because of a bad reputation TLD or bad ip neighborhood.