DMARC Has Been Public Since 2012. 68.4% of Domains Still Don't Enforce It

# Summary Despite DMARC being available for 14 years as a free email authentication standard, 68.4% of the 67,336 domains analyzed either lack a DMARC record (45.1%) or have one that doesn't enforce it (23.3%). Of the domains with DMARC records, only 29.7% enforce full rejection of unauthenticated emails, while 42.5% remain stuck in monitoring mode (p=none) rather than moving to enforcement. The analysis suggests the primary adoption gap has shifted from simply publishing DMARC records to actually enforcing authentication policies.