Email authentication relies on DNS, even though it was never built for this purpose. This causes over 70% of email authentication projects to fail. A better approach is to build a purpose-built email authentication responder.