{"schemaVersion":"1.0.0","report":{"id":"email-authentication-adoption-2026","edition":"2026","title":"Email authentication adoption 2026","description":"Of the top 10,000 domains that receive mail, 82.9% publish DMARC and 60.9% enforce it. 93.2% publish SPF, 65.0% a DKIM key we could find, and 4.0% MTA-STS.","publishedAt":"2026-11-01","updatedAt":"2026-11-01","asOf":"2026-11-01","datasetLicense":"CC BY 4.0","attribution":"Shipmail Research, Email authentication adoption, 2026.","sourceIds":["tranco-list-7462x","tranco-methodology","rfc-7208-spf","rfc-6376-dkim","rfc-9989-dmarc","rfc-8461-mta-sts","rfc-8460-tls-rpt","rfc-7505-null-mx","rfc-8484-dns-over-https","google-public-dns-doh","cloudflare-1111-doh","adguard-dns-unfiltered","bimigroup-implementation-guide","google-gmail-sender-guidelines","yahoo-sender-best-practices"]},"methodologyUrl":"https://shipmail.to/research/email-authentication-adoption/2026#method","canonicalUrl":"https://shipmail.to/research/email-authentication-adoption/2026","licenseUrl":"https://creativecommons.org/licenses/by/4.0/","measurements":{"schemaVersion":1,"list":{"name":"Tranco","id":"7462X","createdOn":"2026-10-31","url":"https://tranco-list.eu/list/7462X/10000","size":10000,"windowStart":"2026-10-02","windowEnd":"2026-10-31","payLevelDomains":true,"sources":["crux","farsight","majestic","radar","umbrella"]},"collectedFrom":"2026-11-01T12:15:10.084Z","collectedTo":"2026-11-01T12:18:41.152Z","resolvers":["google","cloudflare","adguard"],"dkimSelectorsProbed":["google","selector1","selector2","k1","k2","s1","s2","default","dkim","mail","sig1","protonmail","fm1"],"bimiSelector":"default","domains":9999,"nxdomain":10,"lookupErrors":{"mx":12,"apexTxt":13,"dmarc":17,"mtaSts":23,"tlsRpt":27,"bimi":22,"dkim":47},"segments":{"all":{"base":9999,"metrics":{"mx_present":{"count":7252,"percent":72.5},"mx_null":{"count":76,"percent":0.8},"mx_absent":{"count":2659,"percent":26.6},"mx_error":{"count":12,"percent":0.1},"spf_present":{"count":7535,"percent":75.4},"spf_multiple":{"count":54,"percent":0.5},"spf_all_fail":{"count":3762,"percent":37.6},"spf_all_softfail":{"count":3320,"percent":33.2},"spf_all_neutral":{"count":158,"percent":1.6},"spf_all_pass":{"count":3,"percent":0},"spf_all_missing":{"count":238,"percent":2.4},"dmarc_present":{"count":6743,"percent":67.4},"dmarc_invalid":{"count":17,"percent":0.2},"dmarc_reject":{"count":3122,"percent":31.2},"dmarc_quarantine":{"count":1921,"percent":19.2},"dmarc_none":{"count":1683,"percent":16.8},"dmarc_enforced":{"count":5041,"percent":50.4},"dmarc_pct_below_100":{"count":135,"percent":1.4},"dmarc_test_mode":{"count":2,"percent":0},"dmarc_rua":{"count":5808,"percent":58.1},"dkim_found":{"count":4785,"percent":47.9},"mta_sts":{"count":289,"percent":2.9},"tls_rpt":{"count":325,"percent":3.3},"bimi":{"count":973,"percent":9.7},"spf_dkim_dmarc_enforced":{"count":3365,"percent":33.7}}},"mail":{"base":7252,"metrics":{"mx_present":{"count":7252,"percent":100},"mx_null":{"count":0,"percent":0},"mx_absent":{"count":0,"percent":0},"mx_error":{"count":0,"percent":0},"spf_present":{"count":6760,"percent":93.2},"spf_multiple":{"count":49,"percent":0.7},"spf_all_fail":{"count":3131,"percent":43.2},"spf_all_softfail":{"count":3205,"percent":44.2},"spf_all_neutral":{"count":144,"percent":2},"spf_all_pass":{"count":3,"percent":0},"spf_all_missing":{"count":228,"percent":3.1},"dmarc_present":{"count":6013,"percent":82.9},"dmarc_invalid":{"count":16,"percent":0.2},"dmarc_reject":{"count":2546,"percent":35.1},"dmarc_quarantine":{"count":1873,"percent":25.8},"dmarc_none":{"count":1578,"percent":21.8},"dmarc_enforced":{"count":4417,"percent":60.9},"dmarc_pct_below_100":{"count":126,"percent":1.7},"dmarc_test_mode":{"count":2,"percent":0},"dmarc_rua":{"count":5233,"percent":72.2},"dkim_found":{"count":4715,"percent":65},"mta_sts":{"count":287,"percent":4},"tls_rpt":{"count":324,"percent":4.5},"bimi":{"count":958,"percent":13.2},"spf_dkim_dmarc_enforced":{"count":3338,"percent":46}}}},"providers":{"base":7252,"rows":[{"id":"google-workspace","name":"Google Workspace","count":2477,"percent":34.2},{"id":"microsoft-365","name":"Microsoft 365","count":1138,"percent":15.7},{"id":"mimecast","name":"Mimecast","count":140,"percent":1.9},{"id":"cloudflare-email-routing","name":"Cloudflare Email Routing","count":113,"percent":1.6},{"id":"amazon","name":"Amazon WorkMail or SES","count":103,"percent":1.4},{"id":"cisco-secure-email","name":"Cisco Secure Email","count":69,"percent":1},{"id":"yandex-360","name":"Yandex 360","count":67,"percent":0.9},{"id":"zoho","name":"Zoho Mail","count":63,"percent":0.9},{"id":"proton","name":"Proton Mail","count":33,"percent":0.5},{"id":"godaddy","name":"GoDaddy Professional Email","count":25,"percent":0.3},{"id":"fastmail","name":"Fastmail","count":23,"percent":0.3},{"id":"namecheap","name":"Namecheap Private Email","count":20,"percent":0.3},{"id":"barracuda","name":"Barracuda Email Gateway Defense","count":15,"percent":0.2},{"id":"rackspace","name":"Rackspace Email","count":15,"percent":0.2},{"id":"ovhcloud","name":"OVHcloud","count":9,"percent":0.1},{"id":"proofpoint-essentials","name":"Proofpoint Essentials","count":8,"percent":0.1},{"id":"gandi","name":"Gandi","count":7,"percent":0.1},{"id":"improvmx","name":"ImprovMX","count":6,"percent":0.1},{"id":"ionos","name":"IONOS","count":5,"percent":0.1},{"id":"mailbox-org","name":"mailbox.org","count":4,"percent":0.1},{"id":"icloud","name":"iCloud Mail","count":3,"percent":0},{"id":"infomaniak","name":"Infomaniak","count":2,"percent":0},{"id":"migadu","name":"Migadu","count":2,"percent":0},{"id":"hostinger","name":"Hostinger Email","count":1,"percent":0}],"ownServers":{"count":1099,"percent":15.2},"unknown":{"count":1805,"percent":24.9}},"dkimSelectors":[{"selector":"google","count":2097,"percent":28.9},{"selector":"selector1","count":1361,"percent":18.8},{"selector":"selector2","count":772,"percent":10.6},{"selector":"k1","count":820,"percent":11.3},{"selector":"k2","count":811,"percent":11.2},{"selector":"s1","count":2023,"percent":27.9},{"selector":"s2","count":1960,"percent":27},{"selector":"default","count":645,"percent":8.9},{"selector":"dkim","count":254,"percent":3.5},{"selector":"mail","count":737,"percent":10.2},{"selector":"sig1","count":4,"percent":0.1},{"selector":"protonmail","count":29,"percent":0.4},{"selector":"fm1","count":40,"percent":0.6}]},"sources":[{"id":"tranco-list-7462x","label":"Tranco list 7462X, top 10,000","url":"https://tranco-list.eu/list/7462X/10000","verifiedAt":"2026-11-01","publisher":"tranco-list.eu","sourceClass":"official_product"},{"id":"tranco-methodology","label":"Tranco: methodology","url":"https://tranco-list.eu/methodology","verifiedAt":"2026-11-01","publisher":"tranco-list.eu","sourceClass":"official_product"},{"id":"rfc-7208-spf","label":"RFC 7208: Sender Policy Framework (SPF)","url":"https://www.rfc-editor.org/rfc/rfc7208.html","verifiedAt":"2026-10-11","publisher":"rfc-editor.org","sourceClass":"official_product"},{"id":"rfc-6376-dkim","label":"RFC 6376: DomainKeys Identified Mail (DKIM) signatures","url":"https://www.rfc-editor.org/rfc/rfc6376.html","verifiedAt":"2026-10-11","publisher":"rfc-editor.org","sourceClass":"official_product"},{"id":"rfc-9989-dmarc","label":"RFC 9989: Domain-based Message Authentication, Reporting, and Conformance (DMARC)","url":"https://www.rfc-editor.org/rfc/rfc9989.html","verifiedAt":"2026-10-11","publisher":"rfc-editor.org","sourceClass":"official_product"},{"id":"rfc-8461-mta-sts","label":"RFC 8461: SMTP MTA Strict Transport Security (MTA-STS)","url":"https://www.rfc-editor.org/rfc/rfc8461.html","verifiedAt":"2026-11-01","publisher":"rfc-editor.org","sourceClass":"standard"},{"id":"rfc-8460-tls-rpt","label":"RFC 8460: SMTP TLS Reporting","url":"https://www.rfc-editor.org/rfc/rfc8460.html","verifiedAt":"2026-11-01","publisher":"rfc-editor.org","sourceClass":"standard"},{"id":"rfc-7505-null-mx","label":"RFC 7505: A null MX resource record","url":"https://www.rfc-editor.org/rfc/rfc7505.html","verifiedAt":"2026-11-01","publisher":"rfc-editor.org","sourceClass":"standard"},{"id":"rfc-8484-dns-over-https","label":"RFC 8484: DNS queries over HTTPS (DoH)","url":"https://www.rfc-editor.org/rfc/rfc8484.html","verifiedAt":"2026-11-01","publisher":"rfc-editor.org","sourceClass":"standard"},{"id":"google-public-dns-doh","label":"Google Public DNS: DNS-over-HTTPS","url":"https://developers.google.com/speed/public-dns/docs/doh","verifiedAt":"2026-11-01","publisher":"developers.google.com","sourceClass":"official_product"},{"id":"cloudflare-1111-doh","label":"Cloudflare 1.1.1.1: make DNS-over-HTTPS requests","url":"https://developers.cloudflare.com/1.1.1.1/encryption/dns-over-https/make-api-requests/","verifiedAt":"2026-11-01","publisher":"developers.cloudflare.com","sourceClass":"official_product"},{"id":"adguard-dns-unfiltered","label":"AdGuard DNS: known DNS providers, non-filtering","url":"https://adguard-dns.io/kb/general/dns-providers/","verifiedAt":"2026-11-01","publisher":"adguard-dns.io","sourceClass":"official_product"},{"id":"bimigroup-implementation-guide","label":"BIMI Group: implementation guide","url":"https://bimigroup.org/implementation-guide/","verifiedAt":"2026-10-11","publisher":"bimigroup.org","sourceClass":"official_product"},{"id":"google-gmail-sender-guidelines","label":"Gmail email sender guidelines","url":"https://support.google.com/a/answer/81126?hl=en","verifiedAt":"2026-10-11","publisher":"support.google.com","sourceClass":"official_product"},{"id":"yahoo-sender-best-practices","label":"Yahoo Sender Hub best practices","url":"https://senders.yahooinc.com/best-practices/","verifiedAt":"2026-10-11","publisher":"senders.yahooinc.com","sourceClass":"official_product"}]}