Headers, TLS certificate and email authentication, free and instant. A single passive connection, the same one any browser or mail server makes when reaching your domain.