Verify sender addresses using DMARC/DKIM/SPF+
When Geary downloads receives new email, it should check any DMARC/DKIM/SPF records published for the From/Sender's domain and verify the message is valid. If not, the messages should be marked as being potentially fraudulent and the client should indicate this fact in the UI, and warn before loading remote resources the email contains.