Email Security.

SPF, DKIM, DMARC and the transport around them. Whether someone can send as you.

Reads published DNS only. If you sign mail with a custom DKIM selector, name it and it will be checked first.