uis, 1 year ago

Also neither DKIM / SPF provide any protections if an attacker is able to poison DNS records.

Neither TLS provide in such case. Attacker can request ACME cert.