Verification by recipients


Public key signatures
no load on joe-jobbed "sender"

SMTP callback verification
already a very effective check
scaling problems if too popular

Lightweight callback protocol
slow deployment

Stunt DNS server