DKIM

DomainKeys Identified Mail: a cryptographic signature added by the sending server, verified against a public key in DNS. It survives forwarding, unlike SPF.