SMTP started without proper authentication so anyone could spoof anyone's address. Most of those extensions try to fix this. But ActivityPub, for example, has a

SMTP started without proper authentication so anyone could spoof anyone's address. Most of those extensions try to fix this. But ActivityPub, for example, has authentication built-in from the beginning in the form of HTTP signatures.