> There must be a secure method that would allow a receiver to verify whether > or not the sender actually exists as a user on the mail server for the > domain the e-mail is coming from. this is already possible. it is not sufficient. the recipient doesn't care whether the sender address exists, the recipient cares whether he gets spam.