The latest articles on DEV Community by Alexandre B (@mailtester-ninja). https://dev.to/mailtester-ninja https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4010924%2F6a836c06-e643-4fb9-864c-3d2ba4d95215.png https://dev.to/mailtester-ninja en Alexandre B Wed, 01 Jul 2026 12:47:30 +0000 https://dev.to/mailtester-ninja/the-state-of-email-in-2026-what-50000-domains-reveal-about-mx-spf-dmarc-441c https://dev.to/mailtester-ninja/the-state-of-email-in-2026-what-50000-domains-reveal-about-mx-spf-dmarc-441c <p><em>By the team at <a href="https://mailtester.ninja" rel="noopener noreferrer">MailTester Ninja</a> — a real-time email verification API that stores nothing.</em></p> <p>We verify a lot of email for a living. So we pointed our infrastructure at a representative panel of <strong>50,000 of the world's most-linked domains</strong> and measured how email is actually configured in 2026 — MX providers, SPF and DMARC. Pure DNS, aggregate only, <strong>no personal data</strong>.</p> <p>Here's what the internet's mail setup looks like right now.</p> <h2> Email is still (almost) everywhere </h2> <p><strong>79.9%</strong> of these domains are mail-enabled (they publish MX records). Email isn't going anywhere.</p> <h2> Authentication: adopted, but not enforced </h2> <ul> <li> <strong>75.8%</strong> publish an <strong>SPF</strong> record</li> <li> <strong>64%</strong> publish a <strong>DMARC</strong> record</li> <li>…but only <strong>22.6%</strong> actually <strong>enforce</strong> it with <code>p=reject</code> </li> </ul> <p>That last number is the real story. Of the domains that bother to publish DMARC, only <strong>35.2%</strong> are on <code>p=reject</code> — the rest sit on <code>p=none</code> (37.2%, monitoring only) or <code>quarantine</code> (27.6%). <strong>Most of the web announces a policy it doesn't enforce.</strong> That's a deliverability and spoofing gap hiding in plain sight.</p> <h2> Who runs the world's inboxes? </h2> <ul> <li> <strong>Other / self-hosted</strong> — 32.6%</li> <li> <strong>Google Workspace / Gmail</strong> — 28.2%</li> <li> <strong>Microsoft 365 / Outlook</strong> — 22.5%</li> <li> <strong>Proofpoint</strong> — 5.5%</li> <li> <strong>Mimecast</strong> — 3.1%</li> <li> <strong>Tencent QQ</strong> — 2%</li> <li> <strong>Namecheap</strong> — 1.3%</li> <li> <strong>Cisco IronPort</strong> — 0.9%</li> </ul> <p>Self-hosted and the two hyperscalers (Google Workspace and Microsoft 365) dominate, but the long tail of providers is very real — which is exactly why deliverability is hard: every provider blocks, greylists and reputation-scores differently.</p> <h2> Why we publish this </h2> <p>We built <a href="https://github.com/mailtester-ninja/email-deliverability-data" rel="noopener noreferrer">an open, daily-updated dataset</a> and a <a href="https://deliverability.mailtester.ninja" rel="noopener noreferrer">live dashboard</a> because deliverability decisions should be based on data, not folklore. It's <strong>CC BY 4.0</strong> — use it, cite it, build on it.</p> <p><strong>Want to check a specific domain?</strong> Our <a href="https://deliverability.mailtester.ninja/tools/deliverability" rel="noopener noreferrer">free analyzer</a> shows any domain's MX / SPF / DMARC in one click — no signup, nothing stored.</p> <p><em>Methodology: Live DNS scan (MX/SPF/DMARC). Aggregate only — no email sent, no personal data. Sample updated Wed, 01 Jul 2026 12:31:00 GMT.</em></p> email deliverability webdev data