DKIM signs outbound mail with a private key; receivers verify against the public key published in DNS at <selector>._domainkey.<domain>. A passing DKIM signature + SPF + DMARC is the modern bar for inbox placement.
DKIM
DomainKeys Identified Mail — cryptographic signature proving the message wasn't tampered with.