DNS and identity checklist
- A/AAAA for HELO hostname
- PTR points to HELO hostname
- Forward-confirmed reverse DNS
- SPF authorizes actual source IP
- DKIM selector resolves and signature validates
- DMARC aligns with visible From domain
- TLS certificate names are reviewed