Email security adoption rankings
Every domain that sends or receives email relies on a few public DNS records. MX says where mail goes. SPF lists the servers allowed to send for the domain. DKIM signs messages, and DMARC tells receivers what to do with mail that claims to come from the domain but doesn't match. MTA-STS and BIMI are newer, optional additions.
Once a month we read these records for the top 10,000 domains in the public Tranco list and publish how many use each one. You can see the figures by country and domain ending, and how they change from month to month.
The figures show adoption only. They don't rate any domain or company. Use them to see what is common, to compare your own setup, or to track how email standards spread.
Latest report
November 2026
68% of the top domains publish a DMARC record and 76% publish an SPF record.
Earlier reports
Earlier reports will appear here each month.
Questions
Which domains are included?
The top 10,000 domains in the public Tranco list, a research ranking of popular websites. Domains of Mailbux customers are left out.
How often are the rankings updated?
Once a month. A month is published only if we scanned at least 90% of the list.
Does a domain need all of these records?
No. MX and SPF are the basics. DKIM and DMARC are optional and help mail get delivered. MTA-STS and BIMI are optional too.
These figures describe which records domains publish. They are not a security rating of any domain or group.
How we measure
Each month we read the public DNS records of the top 10,000 domains in the public Tranco list. We look for MX, SPF, DKIM, DMARC, MTA-STS and BIMI records. We read public DNS only. We never connect to these domains' mail servers and never send them email.
A month is published only if we scanned at least 90% of the list. Any group with fewer than 50 domains is not shown. Domains of Mailbux customers are left out.
DKIM is checked under common selector names only, so its numbers are a lower estimate. All percentages are rounded to whole numbers, so totals may not add up to exactly 100%.
Domains that publish no mail records count as not adopting.
Last updated 10.11.2026 20:35 IL (10.11.2026 18:35 UTC)