SPF, DKIM and DMARC stop scammers from spoofing your domain and keep your email out of spam. Here is what each record does, and a three-week rollout that won’t break your own mail.