What 99,300 Domains Reveal About Email Authentication and DNS Resilience

– Primary email providers and gateways handle message delivery, but domain owners are ultimately responsible for configuring and maintaining DMARC policies to prevent domain forgery.

– A Palisade study of 99,300 domains revealed that two in five domains lack a DMARC policy, and over a third of domains with DMARC remain in passive monitoring mode rather than enforcing protection.

– Over 20% of DMARC-publishing domains omit aggregate reporting addresses, leaving administrators without the visibility required to fix authentication failures and transition to strict enforcement.