DMARC enforcement declines as email authentication grows, study finds

A scan of 671,693 domains found 468,749 with DMARC records, but enforcement dropped 0.42 percentage points last month despite 9,173 new domains adding records. Over 117,000 domains publish inert DMARC policies that block nothing and report nothing. The top 1,000 domains enforce DMARC at 73%, versus 19% for less popular domains.