i am creating a game of sorts where you use and earn credits to accomplish tasks. I am curious if you can effectively use gmail's security features to secure these submissions if the emails are all in one of the major "safe" ESPs - that use SPF and DMARC.
For simplicity let's just say every account except the game_host@myserver is a gmail email account. https://support.google.com/a/topic/4388154?hl=en&ref_topic=29818
you obviously know it is coming from gmail and thereby has to be the correct sender/receiver. no spoofing possible and the whole message should stay https the whole time right? https://support.google.com/a/answer/60764?hl=en