Investigate verifying email identities in addition to domain identities

[jameshochadel]

Domain verification, the only way to send mail with the brokerpak currently, allows users to send from any email at a given domain. Some customers' agencies may not want to allow such broad sending permissions, which open the door to spoofing emails and abuse.

SES supports verifying a single email instead of an entire domain: https://docs.aws.amazon.com/ses/latest/dg/creating-identities.html#verify-email-addresses-procedure

Investigate adding this as a feature, possibly as a different plan.

• [ ] Are DNS records still required? Probably.

[jameshochadel]

Note: This might make sense as a post-launch feature.