Sign your email.
Strengthen your domain.

Create a 2048-bit RSA key pair locally. Store the private key securely and add the TXT record at your DNS provider.