The State of Email Authentication
How many well-known public domains actually publish SPF, DKIM and DMARC — and how few enforce DMARC at p=reject.
ShowMyIP Original Research
Research
We publish original, privacy-safe research built from scans of public domains and their public DNS infrastructure. We measure the internet, not people: every study reports only aggregate figures, names no individuals, and stores no personal data. Each report states its exact sample size, scan date and the source of its domain list so you can cite it with confidence.
How we do research
Our tools query public DNS and internet infrastructure millions of times. That gives us a privileged, honest vantage point to answer questions the standards bodies recommend but rarely measure in the wild: not "what should domains do?" but "what do they actually do?"
Every report follows the same rules. We measure only public domains and their public records, so there is no personal data and the work sits outside GDPR by construction. We publish only aggregate counts and percentages — never a per-domain table that could shame a specific operator. And we always disclose the exact sample size, the scan date, the source of the domain list, and the method, so the numbers are reproducible and citable.
Last reviewed:
How this tool works: This tool runs in your browser and on our server in real time. Depending on the tool, results are computed directly from the input you provide or retrieved from live, authoritative data sources at the moment you run a lookup. We do not sell your data, and your lookups are kept private — any history shown here is stored only on your device.