Guide to email security best practices

Posting this for others who aren't email admins but are involved enough to constantly have to google dkim vs dmarc etc