The State of DMARC in .DE
Being deeply involved into Email Authentication in Germany we did some research on the state of DMARC in .de. I’ve written a summary in our blog: https://sys4.de/en/blog/dmarc-in-de-202503/
Judge for yourself…
@patrickbenkoetter I think there is a mistranslation : "Other than for example SWITCH, the central registry for .ch and .li domains, who publishes lists with connected domains in their top level zones, Germany’s DENIC, top level registry for .de, inform the public about connected domains in .de."
DENIC does /not/ publish such lists, right ?
@RGrunblatt Than you! I’ve fixed that and the pipeline is about to roll out the new blog version.
> Judge for yourself
Is it fair to make judgements for not calling it
.de MARC
@patrickbenkoetter That is wild.
I recently started looking at whether the mails I am receiving have passed relevant checks and I was surprised to see how often DMARC is not actually passed, but I still received the mail normally.
Interesting to know that my observations seem to match the reality.
@jana ACK! There are really many domains out there that fail DMARC - even when they have DMARC in place. My guess it will get better when important platforms begin to outright reject such with erroneous DMARC or downgrade their reputation to a point where they wish they’d been rejected in the first. :-)