Email security adoption by domain ending, November 2026

The share of top domains publishing each email record, grouped by domain ending such as .com, .org or a country ending.

Share of domains in each group that publish each record (%).
Domain endingShare of all top domainsSPFDKIMDMARCDMARC p=rejectMTA-STSBIMI
.com‎51%‎75%‎59%‎69%‎33%‎3%‎13%
.net‎8%‎60%‎30%‎47%‎25%‎1%‎2%
.org‎4%‎84%‎58%‎75%‎31%‎5%‎7%
.ru‎3%‎80%‎55%‎73%‎35%‎0%‎5%
.io‎2%‎68%‎54%‎62%‎24%‎2%‎6%
.de‎2%‎92%‎51%‎85%‎32%‎9%‎13%
.jp‎1%‎80%‎32%‎63%‎9%‎0%‎9%
.edu‎1%‎99%‎94%‎99%‎34%‎4%‎5%
.gov‎1%‎97%‎69%‎99%‎72%‎4%‎3%
.fr‎1%‎92%‎60%‎88%‎38%‎2%‎19%
.it‎1%‎98%‎64%‎88%‎30%‎2%‎12%
.com.br‎1%‎95%‎82%‎90%‎33%‎4%‎10%
.tv‎1%‎60%‎38%‎45%‎16%‎3%‎6%
.cn‎1%‎44%‎21%‎27%‎9%‎2%‎0%
.co‎1%‎78%‎48%‎67%‎28%‎2%‎10%
.es‎1%‎93%‎74%‎85%‎31%‎2%‎10%
.co.jp‎1%‎97%‎67%‎98%‎25%‎0%‎21%
.gov.in‎1%‎94%‎19%‎92%‎42%‎0%‎0%
.pl‎1%‎96%‎55%‎80%‎22%‎4%‎14%
.co.uk‎1%‎94%‎68%‎92%‎66%‎10%‎18%

Back to the November 2026 report

These figures describe which records domains publish. They are not a security rating of any domain or group.

How we measure

Each month we read the public DNS records of the top 10,000 domains in the public Tranco list. We look for MX, SPF, DKIM, DMARC, MTA-STS and BIMI records. We read public DNS only. We never connect to these domains' mail servers and never send them email.

A month is published only if we scanned at least 90% of the list. Any group with fewer than 50 domains is not shown. Domains of Mailbux customers are left out.

DKIM is checked under common selector names only, so its numbers are a lower estimate. All percentages are rounded to whole numbers, so totals may not add up to exactly 100%.

Domains that publish no mail records count as not adopting.

Last updated 10.11.2026 20:35 IL (10.11.2026 18:35 UTC)