I think the post office could suffice in most countries for this.
Or server operators could just implement RTA headers and put the liability on apps/devices to look for the header.