Verified senders
DKIM and SPF tell you the sender is who the header claims.
Mail trusts Authentication-Results from its own mail host. A pass counts only when the signing domain aligns with the From address.
| Result | Your next step |
|---|---|
| DKIM or SPF aligned | You can Allow this sender once, for later mail too. |
| Fail or missing | Read it yourself. Leave it pending, or Block it. |
A verified sender is not automatically Allowed. You still choose.