{
 "study": "Email authentication across EVM infrastructure",
 "publisher": "Zyrone Security Ltda.",
 "measured": "2026-10-07",
 "method": "public DNS over DoH only; nothing sent to any domain",
 "note": "Domain names are withheld pending notification of the affected parties, and the redaction is applied to every row rather than to some, so the omissions do not identify anyone by elimination. Identifiers are stable within this file so every aggregate in the article can be recomputed. No organisation is named anywhere in this dataset, including mail providers and third-party senders.",
 "fields": {
  "spf_all": "qualifier of the SPF all mechanism, null if no SPF record",
  "spf_lookups": "DNS-querying mechanisms in the full SPF tree, RFC 7208 limit is 10",
  "spf_includes": "count of direct include: targets",
  "dmarc": "null if no record; p, sp, pct, rua present",
  "mta_sts": "_mta-sts TXT present (policy file NOT fetched, so mode unknown)",
  "tlsrpt": "_smtp._tls TXT present",
  "dnssec": "DS record present",
  "has_mx": "domain receives mail",
  "provider": "inbound mail provider from MX, generalised: no vendor is named in this study"
 },
 "rows": [
  {
   "id": "rpc-01",
   "stratum": "rpc",
   "spf_all": "-all",
   "spf_lookups": 5,
   "spf_includes": 4,
   "dmarc": {
    "p": "reject",
    "sp": "reject",
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "rpc-02",
   "stratum": "rpc",
   "spf_all": "~all",
   "spf_lookups": 9,
   "spf_includes": 5,
   "dmarc": {
    "p": "quarantine",
    "sp": "none",
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "rpc-03",
   "stratum": "rpc",
   "spf_all": "~all",
   "spf_lookups": 5,
   "spf_includes": 4,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "rpc-04",
   "stratum": "rpc",
   "spf_all": "-all",
   "spf_lookups": 7,
   "spf_includes": 6,
   "dmarc": {
    "p": "quarantine",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "rpc-05",
   "stratum": "rpc",
   "spf_all": "-all",
   "spf_lookups": 5,
   "spf_includes": 4,
   "dmarc": {
    "p": "reject",
    "sp": "reject",
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "rpc-06",
   "stratum": "rpc",
   "spf_all": "-all",
   "spf_lookups": 5,
   "spf_includes": 4,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-B"
  },
  {
   "id": "rpc-07",
   "stratum": "rpc",
   "spf_all": "~all",
   "spf_lookups": 4,
   "spf_includes": 3,
   "dmarc": {
    "p": "reject",
    "sp": "quarantine",
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "rpc-08",
   "stratum": "rpc",
   "spf_all": "~all",
   "spf_lookups": 6,
   "spf_includes": 4,
   "dmarc": {
    "p": "quarantine",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "rpc-09",
   "stratum": "rpc",
   "spf_all": "-all",
   "spf_lookups": 1,
   "spf_includes": 1,
   "dmarc": {
    "p": "quarantine",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "rpc-10",
   "stratum": "rpc",
   "spf_all": "~all",
   "spf_lookups": 3,
   "spf_includes": 3,
   "dmarc": {
    "p": "quarantine",
    "sp": "none",
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "rpc-11",
   "stratum": "rpc",
   "spf_all": "~all",
   "spf_lookups": 1,
   "spf_includes": 1,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "rpc-12",
   "stratum": "rpc",
   "spf_all": "~all",
   "spf_lookups": 6,
   "spf_includes": 2,
   "dmarc": {
    "p": "none",
    "sp": "none",
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "self-or-other"
  },
  {
   "id": "rpc-13",
   "stratum": "rpc",
   "spf_all": null,
   "spf_lookups": 0,
   "spf_includes": 0,
   "dmarc": {
    "p": "none",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": false,
   "provider": "none"
  },
  {
   "id": "rpc-14",
   "stratum": "rpc",
   "spf_all": "-all",
   "spf_lookups": 0,
   "spf_includes": 0,
   "dmarc": {
    "p": "reject",
    "sp": "reject",
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": false,
   "provider": "none"
  },
  {
   "id": "rpc-15",
   "stratum": "rpc",
   "spf_all": "-all",
   "spf_lookups": 7,
   "spf_includes": 4,
   "dmarc": {
    "p": "quarantine",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": true,
   "tlsrpt": true,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "rpc-16",
   "stratum": "rpc",
   "spf_all": "-all",
   "spf_lookups": 3,
   "spf_includes": 2,
   "dmarc": {
    "p": "reject",
    "sp": "reject",
    "pct": 100,
    "rua": true
   },
   "mta_sts": true,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "foundation-01",
   "stratum": "foundation",
   "spf_all": "-all",
   "spf_lookups": 3,
   "spf_includes": 2,
   "dmarc": {
    "p": "reject",
    "sp": "reject",
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "foundation-02",
   "stratum": "foundation",
   "spf_all": "-all",
   "spf_lookups": 2,
   "spf_includes": 2,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": false
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "foundation-03",
   "stratum": "foundation",
   "spf_all": "~all",
   "spf_lookups": 1,
   "spf_includes": 1,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "foundation-04",
   "stratum": "foundation",
   "spf_all": "-all",
   "spf_lookups": 3,
   "spf_includes": 3,
   "dmarc": {
    "p": "quarantine",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": true,
   "tlsrpt": true,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "foundation-05",
   "stratum": "foundation",
   "spf_all": "-all",
   "spf_lookups": 3,
   "spf_includes": 2,
   "dmarc": {
    "p": "reject",
    "sp": "reject",
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "foundation-06",
   "stratum": "foundation",
   "spf_all": "~all",
   "spf_lookups": 5,
   "spf_includes": 5,
   "dmarc": {
    "p": "quarantine",
    "sp": "quarantine",
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "foundation-07",
   "stratum": "foundation",
   "spf_all": "-all",
   "spf_lookups": 1,
   "spf_includes": 1,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "foundation-08",
   "stratum": "foundation",
   "spf_all": "-all",
   "spf_lookups": 1,
   "spf_includes": 1,
   "dmarc": {
    "p": "reject",
    "sp": "reject",
    "pct": 100,
    "rua": false
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "foundation-09",
   "stratum": "foundation",
   "spf_all": "-all",
   "spf_lookups": 2,
   "spf_includes": 2,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": false
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "foundation-10",
   "stratum": "foundation",
   "spf_all": "-all",
   "spf_lookups": 5,
   "spf_includes": 2,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "foundation-11",
   "stratum": "foundation",
   "spf_all": "~all",
   "spf_lookups": 4,
   "spf_includes": 4,
   "dmarc": {
    "p": "none",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "foundation-12",
   "stratum": "foundation",
   "spf_all": "no-all",
   "spf_lookups": 5,
   "spf_includes": 5,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "foundation-13",
   "stratum": "foundation",
   "spf_all": "-all",
   "spf_lookups": 1,
   "spf_includes": 1,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "foundation-14",
   "stratum": "foundation",
   "spf_all": "-all",
   "spf_lookups": 2,
   "spf_includes": 2,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "foundation-15",
   "stratum": "foundation",
   "spf_all": "~all",
   "spf_lookups": 1,
   "spf_includes": 1,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": true,
   "tlsrpt": true,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "foundation-16",
   "stratum": "foundation",
   "spf_all": "-all",
   "spf_lookups": 1,
   "spf_includes": 1,
   "dmarc": {
    "p": "quarantine",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "client-01",
   "stratum": "client",
   "spf_all": "~all",
   "spf_lookups": 4,
   "spf_includes": 3,
   "dmarc": {
    "p": "none",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "client-02",
   "stratum": "client",
   "spf_all": null,
   "spf_lookups": 0,
   "spf_includes": 0,
   "dmarc": null,
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "client-03",
   "stratum": "client",
   "spf_all": "~all",
   "spf_lookups": 8,
   "spf_includes": 4,
   "dmarc": {
    "p": "reject",
    "sp": "reject",
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "client-04",
   "stratum": "client",
   "spf_all": "~all",
   "spf_lookups": 2,
   "spf_includes": 2,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "client-05",
   "stratum": "client",
   "spf_all": "~all",
   "spf_lookups": 3,
   "spf_includes": 3,
   "dmarc": {
    "p": "quarantine",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "client-06",
   "stratum": "client",
   "spf_all": "-all",
   "spf_lookups": 2,
   "spf_includes": 2,
   "dmarc": {
    "p": "reject",
    "sp": "reject",
    "pct": 100,
    "rua": true
   },
   "mta_sts": true,
   "tlsrpt": true,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "client-07",
   "stratum": "client",
   "spf_all": "-all",
   "spf_lookups": 3,
   "spf_includes": 3,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "client-08",
   "stratum": "client",
   "spf_all": "-all",
   "spf_lookups": 6,
   "spf_includes": 5,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "client-09",
   "stratum": "client",
   "spf_all": "~all",
   "spf_lookups": 3,
   "spf_includes": 3,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 70,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "client-10",
   "stratum": "client",
   "spf_all": "~all",
   "spf_lookups": 1,
   "spf_includes": 1,
   "dmarc": {
    "p": "none",
    "sp": null,
    "pct": 100,
    "rua": false
   },
   "mta_sts": true,
   "tlsrpt": true,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "client-11",
   "stratum": "client",
   "spf_all": null,
   "spf_lookups": 0,
   "spf_includes": 0,
   "dmarc": null,
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": false,
   "provider": "none"
  },
  {
   "id": "client-12",
   "stratum": "client",
   "spf_all": null,
   "spf_lookups": 0,
   "spf_includes": 0,
   "dmarc": null,
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": false,
   "provider": "none"
  },
  {
   "id": "client-13",
   "stratum": "client",
   "spf_all": "-all",
   "spf_lookups": 1,
   "spf_includes": 1,
   "dmarc": null,
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "security-01",
   "stratum": "security",
   "spf_all": "-all",
   "spf_lookups": 2,
   "spf_includes": 2,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "security-02",
   "stratum": "security",
   "spf_all": "~all",
   "spf_lookups": 3,
   "spf_includes": 3,
   "dmarc": {
    "p": "quarantine",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "security-03",
   "stratum": "security",
   "spf_all": "~all",
   "spf_lookups": 1,
   "spf_includes": 1,
   "dmarc": {
    "p": "quarantine",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "security-04",
   "stratum": "security",
   "spf_all": "-all",
   "spf_lookups": 3,
   "spf_includes": 3,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "security-05",
   "stratum": "security",
   "spf_all": "~all",
   "spf_lookups": 8,
   "spf_includes": 6,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-B"
  },
  {
   "id": "security-06",
   "stratum": "security",
   "spf_all": "-all",
   "spf_lookups": 3,
   "spf_includes": 3,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": true,
   "tlsrpt": true,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "security-07",
   "stratum": "security",
   "spf_all": "~all",
   "spf_lookups": 8,
   "spf_includes": 3,
   "dmarc": {
    "p": "quarantine",
    "sp": "none",
    "pct": 100,
    "rua": true
   },
   "mta_sts": true,
   "tlsrpt": false,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "security-08",
   "stratum": "security",
   "spf_all": "~all",
   "spf_lookups": 3,
   "spf_includes": 1,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": true,
   "tlsrpt": true,
   "dnssec": true,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "security-09",
   "stratum": "security",
   "spf_all": "-all",
   "spf_lookups": 2,
   "spf_includes": 2,
   "dmarc": {
    "p": "quarantine",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "security-10",
   "stratum": "security",
   "spf_all": "~all",
   "spf_lookups": 1,
   "spf_includes": 1,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "security-11",
   "stratum": "security",
   "spf_all": "~all",
   "spf_lookups": 3,
   "spf_includes": 2,
   "dmarc": {
    "p": "quarantine",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "privacy-focused"
  },
  {
   "id": "security-12",
   "stratum": "security",
   "spf_all": "~all",
   "spf_lookups": 5,
   "spf_includes": 3,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "security-13",
   "stratum": "security",
   "spf_all": "~all",
   "spf_lookups": 6,
   "spf_includes": 2,
   "dmarc": {
    "p": "reject",
    "sp": "reject",
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "security-14",
   "stratum": "security",
   "spf_all": "~all",
   "spf_lookups": 1,
   "spf_includes": 1,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "security-15",
   "stratum": "security",
   "spf_all": "~all",
   "spf_lookups": 1,
   "spf_includes": 1,
   "dmarc": {
    "p": "quarantine",
    "sp": null,
    "pct": 100,
    "rua": false
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  },
  {
   "id": "security-16",
   "stratum": "security",
   "spf_all": "-all",
   "spf_lookups": 4,
   "spf_includes": 3,
   "dmarc": {
    "p": "reject",
    "sp": null,
    "pct": 100,
    "rua": true
   },
   "mta_sts": false,
   "tlsrpt": false,
   "dnssec": false,
   "has_mx": true,
   "provider": "hosted-A"
  }
 ],
 "correction": "2026-10-07, after first publication: one row was removed. It was a subdomain whose organisational domain publishes p=reject with no sp override, so under RFC 7489 it inherited enforcement and was never without a policy; it was also a second entry for an organisation already present in the population. Population 62 -> 61. The identifier client-14 is retired rather than reused, so the remaining identifiers stay stable."
}