[LeonM]

This is exactly what SPF and DKIM are designed to do. DMARC enforces this.

Obviously, this is opportunistic security, the receiver must support all this, but >99% does.

[megous]

Yes, but the public testers are not testing the receive side, but the sending side.