Enforcement is no longer optional.

Three rules now put email authentication on the line — to deliver mail, to pass an audit, to satisfy a regulator. Here is what each demands, and where monitoring stops short.