A signature carries the phone and the site address. That address should be the same domain the letter left from. Leaving the old firm’s address in the signature makes the new box look suspect.
SPF and DKIM do not replace the signature. You need both. The box opens from the mail card.