{"study":"email-authentication-2026","title":"The state of email authentication","month":"November 2026","scanDate":"2026-11-04","engine":"web/email-domain-score-core.mjs and web/email-health-core.mjs (same checks as the public email domain health score)","dkimSelectorsTried":23,"dnsRequests":{"requests":34043,"cacheHits":3824,"httpErrors":0,"networkErrors":6,"aborted":false,"resolver":"Cloudflare DNS over HTTPS (cloudflare-dns.com), 5 requests in flight at most, 25 ms minimum between request starts, no retries"},"cuts":{"tranco":{"description":"First 500 domains with MX records in the Tranco top-sites ranking (7462X), in rank order.","source":"Tranco list 7462X, generated 2026-10-31","scanned":755,"excluded":{"noMxRecord":244,"nullMx":7,"notInDns":2,"mxLookupFailed":2},"domains":500,"lookupFailures":{"spf":0,"dmarc":0,"mtasts":0,"tlsrpt":1},"spf":{"published":{"n":460,"of":500,"pct":92},"none":{"n":40,"of":500,"pct":8},"multipleRecords":{"n":2,"of":500,"pct":0.4},"endingMix":{"-all (reject)":{"n":240,"of":458,"pct":52.4},"~all (soft fail)":{"n":184,"of":458,"pct":40.2},"?all (neutral)":{"n":7,"of":458,"pct":1.5},"+all (allows everyone)":{"n":0,"of":458,"pct":0},"redirect= only":{"n":27,"of":458,"pct":5.9},"No all mechanism":{"n":0,"of":458,"pct":0}},"over10Lookups":{"n":14,"of":458,"pct":3.1},"lookupCountIncomplete":{"n":0,"of":458,"pct":0},"over2VoidLookups":{"n":1,"of":458,"pct":0.2},"usesPtr":{"n":2,"of":458,"pct":0.4}},"dmarc":{"published":{"n":445,"of":500,"pct":89},"none":{"n":55,"of":500,"pct":11},"multipleRecords":{"n":0,"of":500,"pct":0},"policyNone":{"n":67,"of":500,"pct":13.4},"policyQuarantine":{"n":119,"of":500,"pct":23.8},"policyReject":{"n":259,"of":500,"pct":51.8},"policyInvalid":{"n":0,"of":500,"pct":0},"enforcing":{"n":378,"of":500,"pct":75.6},"withReportAddress":{"n":421,"of":445,"pct":94.6},"enforcingBelow100Percent":{"n":5,"of":378,"pct":1.3},"enforcingWithSubdomainNone":{"n":24,"of":378,"pct":6.3}},"dkim":{"keyAtCommonSelector":{"n":324,"of":500,"pct":64.8},"cnamePublishedNoKey":{"n":7,"of":500,"pct":1.4},"unknownNoKeyAtCommonSelectors":{"n":169,"of":500,"pct":33.8},"foundKeyBelow2048Bits":{"n":257,"of":324,"pct":79.3}},"transport":{"mtaSts":{"n":29,"of":500,"pct":5.8},"tlsRpt":{"n":33,"of":499,"pct":6.6},"mtaStsAndTlsRpt":{"n":27,"of":499,"pct":5.4}},"mx":{"mixedKnownProviders":{"n":1,"of":500,"pct":0.2},"nullMx":{"n":0,"of":500,"pct":0}},"score":{"median":80,"grades":{"A":{"n":22,"of":500,"pct":4.4},"B":{"n":334,"of":500,"pct":66.8},"C":{"n":76,"of":500,"pct":15.2},"D":{"n":35,"of":500,"pct":7},"F":{"n":33,"of":500,"pct":6.6}},"scored":500},"combined":{"spfAndEnforcingDmarc":{"n":370,"of":500,"pct":74}},"byMailProviderFamily":{"minimumGroupSize":20,"groups":{"Other or self-hosted":{"domains":217,"dmarcNoRecord":{"n":41,"of":217,"pct":18.9},"dmarcPolicyNone":{"n":39,"of":217,"pct":18},"dmarcPolicyQuarantine":{"n":58,"of":217,"pct":26.7},"dmarcPolicyReject":{"n":79,"of":217,"pct":36.4},"dmarcEnforcing":{"n":137,"of":217,"pct":63.1},"spfNoRecord":{"n":21,"of":217,"pct":9.7},"spfOver10Lookups":{"n":4,"of":194,"pct":2.1},"mtaSts":{"n":16,"of":217,"pct":7.4},"dkimKeyAtCommonSelector":{"n":105,"of":217,"pct":48.4}},"Google Workspace":{"domains":156,"dmarcNoRecord":{"n":6,"of":156,"pct":3.8},"dmarcPolicyNone":{"n":16,"of":156,"pct":10.3},"dmarcPolicyQuarantine":{"n":35,"of":156,"pct":22.4},"dmarcPolicyReject":{"n":99,"of":156,"pct":63.5},"dmarcEnforcing":{"n":134,"of":156,"pct":85.9},"spfNoRecord":{"n":9,"of":156,"pct":5.8},"spfOver10Lookups":{"n":5,"of":147,"pct":3.4},"mtaSts":{"n":7,"of":156,"pct":4.5},"dkimKeyAtCommonSelector":{"n":120,"of":156,"pct":76.9}},"Behind a filtering gateway":{"domains":76,"dmarcNoRecord":{"n":5,"of":76,"pct":6.6},"dmarcPolicyNone":{"n":4,"of":76,"pct":5.3},"dmarcPolicyQuarantine":{"n":13,"of":76,"pct":17.1},"dmarcPolicyReject":{"n":54,"of":76,"pct":71.1},"dmarcEnforcing":{"n":67,"of":76,"pct":88.2},"spfNoRecord":{"n":7,"of":76,"pct":9.2},"spfOver10Lookups":{"n":0,"of":69,"pct":0},"mtaSts":{"n":4,"of":76,"pct":5.3},"dkimKeyAtCommonSelector":{"n":59,"of":76,"pct":77.6}},"Microsoft 365":{"domains":51,"dmarcNoRecord":{"n":3,"of":51,"pct":5.9},"dmarcPolicyNone":{"n":8,"of":51,"pct":15.7},"dmarcPolicyQuarantine":{"n":13,"of":51,"pct":25.5},"dmarcPolicyReject":{"n":27,"of":51,"pct":52.9},"dmarcEnforcing":{"n":40,"of":51,"pct":78.4},"spfNoRecord":{"n":3,"of":51,"pct":5.9},"spfOver10Lookups":{"n":5,"of":48,"pct":10.4},"mtaSts":{"n":2,"of":51,"pct":3.9},"dkimKeyAtCommonSelector":{"n":40,"of":51,"pct":78.4}}},"suppressed":0}},"indiaListed":{"description":"Websites of companies listed on the National Stock Exchange of India or the Bombay Stock Exchange that have an official website in Wikidata, all with MX records.","source":"Wikidata (CC0), query run on the scan date","scanned":195,"excluded":{"noMxRecord":27,"nullMx":0,"notInDns":0,"mxLookupFailed":2},"domains":166,"lookupFailures":{"spf":0,"dmarc":0,"mtasts":0,"tlsrpt":1},"spf":{"published":{"n":157,"of":166,"pct":94.6},"none":{"n":9,"of":166,"pct":5.4},"multipleRecords":{"n":2,"of":166,"pct":1.2},"endingMix":{"-all (reject)":{"n":83,"of":155,"pct":53.5},"~all (soft fail)":{"n":65,"of":155,"pct":41.9},"?all (neutral)":{"n":0,"of":155,"pct":0},"+all (allows everyone)":{"n":0,"of":155,"pct":0},"redirect= only":{"n":6,"of":155,"pct":3.9},"No all mechanism":{"n":1,"of":155,"pct":0.6}},"over10Lookups":{"n":14,"of":155,"pct":9},"lookupCountIncomplete":{"n":0,"of":155,"pct":0},"over2VoidLookups":{"n":0,"of":155,"pct":0},"usesPtr":{"n":1,"of":155,"pct":0.6}},"dmarc":{"published":{"n":146,"of":166,"pct":88},"none":{"n":20,"of":166,"pct":12},"multipleRecords":{"n":0,"of":166,"pct":0},"policyNone":{"n":20,"of":166,"pct":12},"policyQuarantine":{"n":61,"of":166,"pct":36.7},"policyReject":{"n":65,"of":166,"pct":39.2},"policyInvalid":{"n":0,"of":166,"pct":0},"enforcing":{"n":126,"of":166,"pct":75.9},"withReportAddress":{"n":131,"of":146,"pct":89.7},"enforcingBelow100Percent":{"n":4,"of":126,"pct":3.2},"enforcingWithSubdomainNone":{"n":4,"of":126,"pct":3.2}},"dkim":{"keyAtCommonSelector":{"n":134,"of":166,"pct":80.7},"cnamePublishedNoKey":{"n":0,"of":166,"pct":0},"unknownNoKeyAtCommonSelectors":{"n":32,"of":166,"pct":19.3},"foundKeyBelow2048Bits":{"n":81,"of":134,"pct":60.4}},"transport":{"mtaSts":{"n":6,"of":166,"pct":3.6},"tlsRpt":{"n":6,"of":165,"pct":3.6},"mtaStsAndTlsRpt":{"n":6,"of":165,"pct":3.6}},"mx":{"mixedKnownProviders":{"n":9,"of":166,"pct":5.4},"nullMx":{"n":0,"of":166,"pct":0}},"score":{"median":77.5,"grades":{"A":{"n":5,"of":166,"pct":3},"B":{"n":106,"of":166,"pct":63.9},"C":{"n":30,"of":166,"pct":18.1},"D":{"n":17,"of":166,"pct":10.2},"F":{"n":8,"of":166,"pct":4.8}},"scored":166},"combined":{"spfAndEnforcingDmarc":{"n":122,"of":166,"pct":73.5}},"byMailProviderFamily":{"minimumGroupSize":20,"groups":{"Microsoft 365":{"domains":72,"dmarcNoRecord":{"n":3,"of":72,"pct":4.2},"dmarcPolicyNone":{"n":7,"of":72,"pct":9.7},"dmarcPolicyQuarantine":{"n":29,"of":72,"pct":40.3},"dmarcPolicyReject":{"n":33,"of":72,"pct":45.8},"dmarcEnforcing":{"n":62,"of":72,"pct":86.1},"spfNoRecord":{"n":1,"of":72,"pct":1.4},"spfOver10Lookups":{"n":5,"of":69,"pct":7.2},"mtaSts":{"n":3,"of":72,"pct":4.2},"dkimKeyAtCommonSelector":{"n":70,"of":72,"pct":97.2}},"Other or self-hosted":{"domains":48,"dmarcNoRecord":{"n":14,"of":48,"pct":29.2},"dmarcPolicyNone":{"n":6,"of":48,"pct":12.5},"dmarcPolicyQuarantine":{"n":18,"of":48,"pct":37.5},"dmarcPolicyReject":{"n":10,"of":48,"pct":20.8},"dmarcEnforcing":{"n":28,"of":48,"pct":58.3},"spfNoRecord":{"n":7,"of":48,"pct":14.6},"spfOver10Lookups":{"n":2,"of":41,"pct":4.9},"mtaSts":{"n":2,"of":48,"pct":4.2},"dkimKeyAtCommonSelector":{"n":25,"of":48,"pct":52.1}},"Google Workspace":{"domains":24,"dmarcNoRecord":{"n":3,"of":24,"pct":12.5},"dmarcPolicyNone":{"n":4,"of":24,"pct":16.7},"dmarcPolicyQuarantine":{"n":9,"of":24,"pct":37.5},"dmarcPolicyReject":{"n":8,"of":24,"pct":33.3},"dmarcEnforcing":{"n":17,"of":24,"pct":70.8},"spfNoRecord":{"n":1,"of":24,"pct":4.2},"spfOver10Lookups":{"n":4,"of":23,"pct":17.4},"mtaSts":{"n":0,"of":24,"pct":0},"dkimKeyAtCommonSelector":{"n":18,"of":24,"pct":75}},"Behind a filtering gateway":{"domains":22,"dmarcNoRecord":{"n":0,"of":22,"pct":0},"dmarcPolicyNone":{"n":3,"of":22,"pct":13.6},"dmarcPolicyQuarantine":{"n":5,"of":22,"pct":22.7},"dmarcPolicyReject":{"n":14,"of":22,"pct":63.6},"dmarcEnforcing":{"n":19,"of":22,"pct":86.4},"spfNoRecord":{"n":0,"of":22,"pct":0},"spfOver10Lookups":{"n":3,"of":22,"pct":13.6},"mtaSts":{"n":1,"of":22,"pct":4.5},"dkimKeyAtCommonSelector":{"n":21,"of":22,"pct":95.5}}},"suppressed":0}},"indiaUniversities":{"description":"250 Indian universities and colleges with MX records, chosen in a fixed pseudo-random order (SHA-256 of the domain) from the Wikidata institutions in India that have an official website.","source":"Wikidata (CC0), query run on the scan date","scanned":301,"excluded":{"noMxRecord":22,"nullMx":1,"notInDns":26,"mxLookupFailed":2},"domains":250,"lookupFailures":{"spf":1,"dmarc":1,"mtasts":1,"tlsrpt":1},"spf":{"published":{"n":209,"of":249,"pct":83.9},"none":{"n":40,"of":249,"pct":16.1},"multipleRecords":{"n":9,"of":249,"pct":3.6},"endingMix":{"-all (reject)":{"n":41,"of":200,"pct":20.5},"~all (soft fail)":{"n":152,"of":200,"pct":76},"?all (neutral)":{"n":4,"of":200,"pct":2},"+all (allows everyone)":{"n":0,"of":200,"pct":0},"redirect= only":{"n":1,"of":200,"pct":0.5},"No all mechanism":{"n":2,"of":200,"pct":1}},"over10Lookups":{"n":6,"of":200,"pct":3},"lookupCountIncomplete":{"n":1,"of":200,"pct":0.5},"over2VoidLookups":{"n":0,"of":200,"pct":0},"usesPtr":{"n":2,"of":200,"pct":1}},"dmarc":{"published":{"n":130,"of":249,"pct":52.2},"none":{"n":113,"of":249,"pct":45.4},"multipleRecords":{"n":6,"of":249,"pct":2.4},"policyNone":{"n":80,"of":249,"pct":32.1},"policyQuarantine":{"n":33,"of":249,"pct":13.3},"policyReject":{"n":17,"of":249,"pct":6.8},"policyInvalid":{"n":0,"of":249,"pct":0},"enforcing":{"n":50,"of":249,"pct":20.1},"withReportAddress":{"n":89,"of":130,"pct":68.5},"enforcingBelow100Percent":{"n":2,"of":50,"pct":4},"enforcingWithSubdomainNone":{"n":8,"of":50,"pct":16}},"dkim":{"keyAtCommonSelector":{"n":136,"of":250,"pct":54.4},"cnamePublishedNoKey":{"n":0,"of":250,"pct":0},"unknownNoKeyAtCommonSelectors":{"n":114,"of":250,"pct":45.6},"foundKeyBelow2048Bits":{"n":51,"of":136,"pct":37.5}},"transport":{"mtaSts":{"n":2,"of":249,"pct":0.8},"tlsRpt":{"n":1,"of":249,"pct":0.4},"mtaStsAndTlsRpt":{"n":1,"of":249,"pct":0.4}},"mx":{"mixedKnownProviders":{"n":2,"of":250,"pct":0.8},"nullMx":{"n":0,"of":250,"pct":0}},"score":{"median":53,"grades":{"A":{"n":2,"of":250,"pct":0.8},"B":{"n":43,"of":250,"pct":17.2},"C":{"n":61,"of":250,"pct":24.4},"D":{"n":100,"of":250,"pct":40},"F":{"n":44,"of":250,"pct":17.6}},"scored":250},"combined":{"spfAndEnforcingDmarc":{"n":46,"of":249,"pct":18.5}},"byMailProviderFamily":{"minimumGroupSize":20,"groups":{"Google Workspace":{"domains":163,"dmarcNoRecord":{"n":75,"of":163,"pct":46},"dmarcPolicyNone":{"n":51,"of":163,"pct":31.3},"dmarcPolicyQuarantine":{"n":18,"of":163,"pct":11},"dmarcPolicyReject":{"n":14,"of":163,"pct":8.6},"dmarcEnforcing":{"n":32,"of":163,"pct":19.6},"spfNoRecord":{"n":33,"of":163,"pct":20.2},"spfOver10Lookups":{"n":4,"of":122,"pct":3.3},"mtaSts":{"n":2,"of":163,"pct":1.2},"dkimKeyAtCommonSelector":{"n":99,"of":163,"pct":60.7}},"Other or self-hosted":{"domains":67,"dmarcNoRecord":{"n":33,"of":66,"pct":50},"dmarcPolicyNone":{"n":20,"of":66,"pct":30.3},"dmarcPolicyQuarantine":{"n":11,"of":66,"pct":16.7},"dmarcPolicyReject":{"n":2,"of":66,"pct":3},"dmarcEnforcing":{"n":13,"of":66,"pct":19.7},"spfNoRecord":{"n":7,"of":66,"pct":10.6},"spfOver10Lookups":{"n":2,"of":58,"pct":3.4},"mtaSts":{"n":0,"of":66,"pct":0},"dkimKeyAtCommonSelector":{"n":22,"of":67,"pct":32.8}},"Microsoft 365":{"domains":20,"dmarcNoRecord":{"n":5,"of":20,"pct":25},"dmarcPolicyNone":{"n":9,"of":20,"pct":45},"dmarcPolicyQuarantine":{"n":4,"of":20,"pct":20},"dmarcPolicyReject":{"n":1,"of":20,"pct":5},"dmarcEnforcing":{"n":5,"of":20,"pct":25},"spfNoRecord":{"n":0,"of":20,"pct":0},"spfOver10Lookups":{"n":0,"of":20,"pct":0},"mtaSts":{"n":0,"of":20,"pct":0},"dkimKeyAtCommonSelector":{"n":15,"of":20,"pct":75}}},"suppressed":0}}},"note":"Aggregates only. No domain names or per-domain results are published."}