SPF, DKIM, DMARC, ARC and spoof intelligence
How Exchange Online Protection evaluates inbound and outbound mail authentication, composite authentication and its reason codes, DKIM signing for custom domains, honouring DMARC in anti-phishing policy, trusted ARC sealers and Enhanced Filtering for third-party gateways, and a staged plan to reach p=reject.