Re: [dmarc-ietf] Stats on DMARC adoption ?

[Seth Blank <[e-mail]>]

On Wed, Apr 13, 2022 at 2:25 PM Jim Fenton <[e-mail]> wrote:

> On 12 Apr 2022, at 20:39, Seth Blank wrote:
>
> > Policies: https://dmarc.org/2022/03/dmarc-policies-up-84-for-2021/
> >
> > For mailboxes that implement DMARC and send reports, Valimail (and
> Dmarcian
> > I believe) have historically tracked and published that. I'll hunt down
> > that data tomorrow. Off the top of my head, it was about 80% of mailboxes
> > globally (4bn+) properly validate DMARC, and the majority of those send
> > reports, with the notable exception of Microsoft, which is now finally
> > starting to do that.
>
> Out of curiosity, what does “properly validate DMARC” mean and how do you
> measure it? If it means “retrieved the DMARC record”, that’s a metric but
> not all that meaningful. I run Spamassassin so I probably would be part of
> that metric but I’m not doing anything with the result. For that matter,
> Spamassassin used to retrieve ADSP records.
>
> If, on the other hand, it means that the recipient domain is acting on a
> DMARC-published policy, that would be meaningful but I’m not sure how one
> would measure that.
>

Yes, "properly validates DMARC" means the mailbox provider validates and
handles the message per RFC 7489. This is easy to measure, because there
aren't that many large mailbox providers, and most are a) public with how
many mailboxes they represent, b) public with the fact that they validate
DMARC, and c) (in nearly all the cases, sans Microsoft) send reports which
can be used to confirm the proper handling of messages per published policy.

S


>
> -Jim
>


-- 

*Seth Blank * | Chief Product Officer
*e:* [e-mail]
*p:* 415.273.8818

This email and all data transmitted with it contains confidential and/or
proprietary information intended solely for the use of individual(s)
authorized to receive it. If you are not an intended and authorized
recipient you are hereby notified of any use, disclosure, copying or
distribution of the information included in this transmission is prohibited
and may be unlawful. Please immediately notify the sender by replying to
this email and then delete it from your system.