Audit a domain's email-authentication posture — SPF, DKIM, DMARC, MTA-STS, TLS-RPT, DANE, BIMI and DNSSEC — and get a letter grade. All read from public DNS.