DKIM
DomainKeys Identified Mail
Cryptographic signature added to email headers. Receivers fetch the public key from DNS and verify that the message body has not been altered. VoltMail rotates DKIM with two selectors so rotation is zero-downtime.
Example
volt._domainkey.acme.dev. IN CNAME volt.domainkey.voltmail.dev.