Email authentication

SPF, DKIM, DMARC and the rest: how the records work, how to align them, and how to reach an enforcing policy without losing mail.