@glyph also (a note to past catherine), DKIM doesn't involve regular key rotation so setting it up is way easier than say Let's Encrypt; you run a single CLI command, update DNS and kinda forget about it forever. or until your key gets compromised at least lol