A DNS record that cryptographically signs your outgoing email, so providers like Gmail trust it really came from your domain and don't flag it as spam.