Check TLSA records and their DNSSEC state for every mail host, against the SMTP profile.
Publicly observable readiness indicators only. This is not an inbox placement score.