I run a census, across all domains I can find each month, and DMARC adoption and subsequently enforcement, does, appear to be increasing, albeit slowly. https://defaults.exposed/trends/dmarc-policy-mix SPF, DKIM, DMARC, it's all a bit "alphabet soup", and many system administrators don't have the time to get into it and get it all setup properly. I know of one financial institution, that spend a large 6 figure sum on an external vendor to help them visualise their RUA reports and still took 4 years to get to enforcement. And, all this time, "ze bad guys" are spoofing their customers. And, then, security folks (I’m one of them), wonder why “bad stuff” happens. There's also a lot of "funny" items in the census data (well, I think they are funny-ish.) “DMARC=v1” - that's it, nothing else, apart from that “p=policy” - loads of folks, copied the user-guide, but didn't actually state a functional policy none/quarantine/reject lots of copying templates - "p=policy name; rua=mailto:an-email-address"; p=<insert local translation here> - (p=rejet, p=quarentine, etc.) a localized "policy name" field label — policynamn (Swedish, 95), politiknavn (Danish/Norwegian, 83), beleidsnaam (Dutch, 72) My analogy, is that when someone buys a domain, they don't, by default get the security that they could/should have with it... akin to buying a car, and having to install the seat belts and brakes yourself. Then, over time, people depend on it, and, it sorta works, and they don't know it don't until they (or their customers), have an issue/problem. Then, they fix it, sorta, but, they are also loath to break anything. So, actually implementing SPF, DKIM, and DMARC an enforcement level is slow, and stalls, a lot. Hence, the “Reisen Detre” for https://defaults.exposed
________________________________ From: mailop <[email protected]> on behalf of Patrick Ben Koetter via mailop <[email protected]> Sent: 20 September 2026 17:43 To: [email protected] <[email protected]> Subject: Re: [mailop] iLands (was Re: When do you move a small sender from DMARC p=none to enforcement?) * Graeme Fowler via mailop <[email protected]>: > I've put Dexter on moderation and prevented further signups from that domain. ACK > I'm confused as to the intent and we've so far not had to discuss the > "integration" of autonomous software agents on the list. Personally, I like > the fact that we're all apparently mostly human! Feels like an attempt to improve AI by asking experts for answers that can't be found on the net so far. If that's what they want they will have to pay me or be human. I find it unethical to use such data if it isn't used to improve society and have it benefit from that. p@rick -- [*] sys4 AG https://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG,80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
_______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
