Defaults.Exposed › MAGY Readiness
The MAGY Readiness Scoreboard
As of July 28, 2026, 20.4% of the world’s 275,666,275 graded domains (56,200,429 domains) publish both an SPF record and a DMARC record — the two parts of the Google/Yahoo/Microsoft sender baseline that are visible in public DNS.
Read this before quoting the number
20.4% is the SPF+DMARC portion of the baseline — not a compliance rate. Full compliance with the mailbox providers’ bulk-sender requirements also demands DKIM signing, SPF/DKIM alignment with the visible From: domain, one-click unsubscribe (RFC 8058) and a spam complaint rate below roughly 0.3% — none of which a DNS census can observe. The strictest rules apply to bulk senders (5,000+ messages/day).
A domain-by-domain DNS census can verify the DNS floor and nothing above it, so the share of domains that would fully pass the baseline is necessarily lower than 20.4%.
What the baseline requires vs what we measure
Census figures as of July 28, 2026 · denominator 275,666,275 graded domains
| Requirement | Visible to a DNS census? | Global share |
|---|---|---|
| Publish an SPF record | Yes — public DNS | 51.2% of graded domains |
| Publish a DMARC record (at least p=none) | Yes — public DNS | 25.8% |
| Both SPF and DMARC (this page’s headline) | Yes — per-domain join | 20.4% |
| Sign mail with DKIM | Partially — we can only probe common selector names | 51.2% have a discoverable selector (not in the headline figure) |
| SPF or DKIM domain alignment with the visible From: | No — message-level, invisible to a DNS census | — |
| One-click unsubscribe (RFC 8058) in bulk mail | No — lives in message headers | — |
| Spam complaint rate below ≈0.3% | No — provider-internal telemetry | — |
| Valid forward + reverse DNS, TLS on transmission | Partially — connection-level requirements sit outside this join | — |
The DKIM figure counts domains where a common selector name answers over DNS; domains using custom selectors are invisible, and the census carries no per-domain SPF ∧ DMARC ∧ DKIM join — which is why DKIM is excluded from the headline figure rather than multiplied in.
How far the world is from the DNS floor
¶ 43.3% of graded domains (119,454,538) publish neither SPF nor DMARC.
¶ 30.9% (85,070,427) publish SPF but no DMARC — the most common half-finished state.
¶ Only 11.8% (32,637,258) go beyond the baseline’s p=none minimum to an enforcing DMARC policy (quarantine or reject).
SPF+DMARC coverage by TLD
TLDs with at least 100,000 graded domains (113 qualify). Aggregates only — no individual domain is named or graded here.
Highest coverage
| # | TLD | Domains graded | SPF + DMARC |
|---|---|---|---|
| 1 | .help | 168,131 | 54.3% |
| 2 | .hr (Croatia) | 104,384 | 53.9% |
| 3 | .nl (Netherlands) | 3,027,676 | 53.1% |
| 4 | .pl (Poland) | 1,658,199 | 52.1% |
| 5 | .it (Italy) | 2,199,572 | 49.3% |
| 6 | .ar (Argentina) | 417,979 | 48.8% |
| 7 | .ng (Nigeria) | 119,991 | 45.6% |
| 8 | .pt (Portugal) | 280,782 | 45.4% |
| 9 | .ro (Romania) | 456,287 | 45.2% |
| 10 | .ch (Switzerland) | 1,409,983 | 44.9% |
Lowest coverage
| # | TLD | Domains graded | SPF + DMARC |
|---|---|---|---|
| 1 | .vip | 1,158,191 | 1.5% |
| 2 | .cn (China) | 2,417,236 | 1.8% |
| 3 | .top | 2,815,956 | 2.0% |
| 4 | .bet | 146,402 | 2.1% |
| 5 | .cc | 1,255,034 | 3.6% |
| 6 | .xn--p1ai | 355,624 | 3.7% |
| 7 | .buzz | 152,866 | 3.7% |
| 8 | .bond | 126,147 | 4.6% |
| 9 | .lol | 334,959 | 4.7% |
| 10 | .kr (South Korea) | 400,259 | 4.8% |
Close the gap on your own domain
The DNS floor is the fixable part, and it is free: publish SPF, publish DMARC, get DKIM signing on. Step-by-step: fix SPF · fix DMARC · fix DKIM.
Run the free check on your domain — results are private to you.
FAQ
What is the MAGY sender baseline?
“MAGY” is deliverability shorthand for Microsoft, Apple, Google and Yahoo — the four big consumer mailbox providers. The enforced, published requirements come from Google and Yahoo (enforcement began February 2024) and Microsoft for consumer Outlook domains (May 2025): authenticate with SPF and DKIM, publish DMARC, align the visible From: domain, support one-click unsubscribe, and keep spam complaints low. Apple publishes similar iCloud Mail guidance without a formal bulk-sender enforcement program.
Is 20.4% the share of domains that comply with the Google/Yahoo rules?
No. 20.4% is the share of the 275,666,275 graded domains that publish both an SPF record and a DMARC record — the two requirements visible in public DNS. Full compliance also requires DKIM signing, domain alignment, one-click unsubscribe and a low spam rate, none of which DNS reveals. The true full-compliance share is therefore necessarily lower than 20.4%.
Do these requirements apply to domains sending fewer than 5,000 emails a day?
Partly. The basic requirements — authenticate with SPF or DKIM, valid reverse DNS, low spam rates — apply to every sender. The full set (SPF and DKIM and DMARC, aligned From:, one-click unsubscribe) binds bulk senders: 5,000+ messages a day to Gmail or Yahoo, and 5,000+ a day to consumer Outlook addresses under Microsoft’s 2025 rules.
Why can’t a census measure DKIM, alignment or unsubscribe headers?
Because they live inside messages, not in a domain’s public DNS. A census can read SPF and DMARC records directly. DKIM keys are only discoverable when a domain uses common selector names, and alignment, List-Unsubscribe headers and spam-rate telemetry are only observable by the receiving mailbox provider.
What happens to senders that miss the baseline?
Increasingly, rejection or the spam folder. Google and Yahoo began phased enforcement in February 2024 (temporary errors, then rejection of non-compliant bulk mail). Microsoft began routing non-compliant high-volume senders to junk for consumer Outlook domains in May 2025. Publishing SPF and DMARC is the DNS-visible floor — the part this page measures.
Cite this
Figures current as of July 28, 2026. Quote the framing with the number: it is the SPF+DMARC portion of the baseline, not full compliance.
Defaults.Exposed, “MAGY Readiness Scoreboard” (as of July 28, 2026). https://defaults.exposed/magy-readiness
Permalink: https://defaults.exposed/magy-readiness · Census source page: /data · Licence: open data
Methodology: how we grade the internet. The joint SPF∧DMARC counts come from a per-domain join across census checks (deduped per domain), not from multiplying marginal rates.