Defaults.Exposed › Trends

Trends

Each edition of the census is measured again from scratch, so two figures from two editions are only comparable when the same kind of thing sits under the line. These pages carry the series that pass that test, with the denominator named in every sentence that quotes a number.

Published trend series

• The DMARC policy mix across four editions: none, quarantine, reject
  Across four 2026 editions about half of published DMARC (Domain-based Message Authentication, Reporting and Conformance) records sat at p=none and the policy mix stayed flat. A p=none record changes nothing.
• HSTS and CSP presence across four editions
  HSTS (HTTP Strict Transport Security) share of answering domains: 19.89%, 19.11%, 19.24%, 19.57% from July to October 2026; CSP (Content Security Policy): 7.64%, 7.93%, 8.02%, 8.40%. Counts rose for both; the HSTS share is still below July's.
• TLS 1.3 across four census editions: what moved and what didn't
  TLS 1.3 (Transport Layer Security) was negotiated on 94.81%, 94.87%, 94.41% and 94.56% of completed handshakes from July to October 2026; TLS 1.2 on 5.19%, 5.13%, 5.59% and 5.44%.
• What we will and will not compare between census editions
  Two census figures are compared only when both denominators are an observed record set in the same edition; shares of all domains are not compared.

How a figure is measured before it is compared: the 33 checks and the grade. The current values are on the census data page.