Domain auth is the DNS proof—SPF, DKIM, and DMARC—that mail from your domain is really yours. SPF names permitted senders, DKIM signs messages, and DMARC sets failure policy and reporting.
For example, if your workspace has no verified sending domain, Deloosh blocks a marketing send with domain_unverified instead of treating unauthenticated mail as safe.