DKIM2 gives legitimate email a verifiable way to show it is from who it says it's from, with every change attributable to whoever made it — so whatever is still in the grey area can be treated as bad. A work in progress in the IETF DKIM working group.