Pretty unconvinced that (the lack of) revokable authorization is the problem with email. But for the sake of argument, lets say it was.

DKIM+whitelist solves that problem, so dkim would still be solving the right problem.