Global DMARC Deployment
85.4%

50 sites tested
2 DNS errors
41 with DMARC

China
37.0%

50 sites tested
4 DNS errors
17 with DMARC

Germany
91.9%

50 sites tested
13 DNS errors
34 with DMARC

Finland
88.2%

50 sites tested
16 DNS errors
30 with DMARC

India
59.2%

50 sites tested
1 DNS error
29 with DMARC

IETF
12.3%

3074 sites tested
0 DNS errors
377 with DMARC

South Korea
42.9%

50 sites tested
8 DNS errors
18 with DMARC

United Kingdom
78.7%

49 sites tested
2 DNS errors
37 with DMARC

United States
91.3%

50 sites tested
4 DNS errors
42 with DMARC

What do these numbers mean?

This experiment attempts to answer the following question: If an average user had a working installation of DMARC on their machine, how useful would it be to them? What percentage of the services and sites the average user regularly accesses are DMARC-enabled? In other words, the experiment attempts to quantify the usefulness of DMARC to the average end user, given the current deployment of DMARC in the Internet.

The experiment does not track how many users or hosts use DMARC in the current Internet. It also does not track how many sites have configurations of DMARC that are not accessible by average users from the Internet.

Domain-based Message Authentication, Reporting and Conformance (DMARC) aims at standardizing how email receivers perform email authentication, so that senders will experience consistent authentication results for their messages at any email receiver implementing DMARC.

The IETF statistics are based on a list of domain names that are derived from the email addresses of currently-active document authors of Internet Engineering Task Force (IETF) documents. This data set was included to investigate if the organizations that IETF authors come from are more progressive in deploying DMARC, compared to the rest of the Internet.

How are these numbers generated?

The scripts that update this page retrieve the names of the web sites that are most popular across the globe, as well as in select countries, from alexa.com in regular intervals. They then check whether the DNS entry for each site name reflects that it uses DMARC. The numbers above show the percentage of these top sites that are DMARC-enabled, as well as the absolute numbers.

Note that although the DNS entry for a site may indicate that DMARC is available, this does not necessarily mean that actually using DMARC with the site will succeed. I’ll eventually add code to verify that DMARC can be used with sites that claim to enable it.

How representative are these numbers?

They’re reasonably representative, but not perfect. One issue is that the sample sets are very small; alexa.com typically offers lists of 100 to 500 top sites for free, depending on the country. More importantly, though, the sample sets are derived from web site names, because that’s all alexa.com offers. It is not clear that checking DMARC deployment based on a set of web site names is resulting in numbers that represent deployment of DMARC in the broader Internet.

Attention, operators: I’m interested in basing these statistics on a more meaningful data set. If you can provide me with a regularly-updated list of most-frequently-looked-up DNS names – or, for SPF or DKIM, a list of the domains that generate the most inbound email – please contact me at please enable javascript to view . The larger your network and the longer the list, the better.

How have these numbers been changing over time?

Funny you should ask. The graphs below (click on each image to get a PDF that lets you zoom in) illustrate the weekly changes of DMARC deployment in the various sample sets since these measurements started in October 2007:

DMARC deployment trends - click to zoom in (PDF)

This graph shows the same data as the one above, but zooms in on the interesting area:

DMARC deployment trends (magnified) - click to zoom in (PDF)

Significant jumps in the historic data (e.g., fall 2008 or spring 2009) are usually due to alexa.com changing what data they make available, or on tracking bugs having been fixed. The latter fixes are often based on suggestions of visitors to this page. See the acknowledgements below.

Download deployment trends as text: global cn de fi in jp kr uk us ietf

Acknowledgements and Changes