DMARC Has Been Public Since 2012. 68.4% of Company Domains Still Don't Enforce It
Summary
CipherCue analyzes DMARC adoption across 67,336 domains, finding that 68.4% either lack a DMARC record or have a non-enforcing policy (p=none). The piece breaks down policy distributions, explains why many domains stay at p=none, examines rua reporting destinations, and covers recent RFC updates that shape DMARC deployment and reporting.