Mail trust posture

An aggregate view of the public MX, SPF and DMARC signals observed across the fixed .auDO panel.

Derived analytical State topic Observation 31 Aug 2026 100 domain fixed panel

Mail trust aggregate published for 31 Aug 2026.

Panel-level evidence

Current Mail trust posture

What was visible across MX, SPF and DMARC in the latest observation.

MX

Whether a public mail route was visible.

Panel100

98Determinate
2Indeterminate
Status
Published
Posture denominator
98
  • Visible9495.9%
  • Null MX00%
  • Not observed44.1%

SPF

What SPF record shape was observed.

Panel100

98Determinate
2Indeterminate
Status
Published
Posture denominator
98
  • Not observed00%
  • Single SPF record8485.7%
  • Multiple records00%
  • Malformed1414.3%

DMARC

What DMARC record state was observed.

Panel100

98Determinate
2Indeterminate
Status
Published
Posture denominator
98
  • Not observed11%
  • Valid9799%
  • Multiple records00%
  • Malformed00%

Detailed distributions

Full Mail trust distributions

The full published distributions are shown below, including secondary SPF and DMARC detail.

MX posture

Status
Published
Denominator
98
  • Visible9495.9%
  • Null MX00%
  • Not observed44.1%

SPF posture

Status
Published
Denominator
98
  • Not observed00%
  • Single SPF record8485.7%
  • Multiple records00%
  • Malformed1414.3%

SPF terminal qualifier

Status
Published
Denominator
84
  • Fail (-all)4148.8%
  • Soft fail (~all)3440.5%
  • Neutral (?all)44.8%
  • Pass (+all)00%
  • Terminal all missing56%

DMARC posture

Status
Published
Denominator
98
  • Not observed11%
  • Valid9799%
  • Multiple records00%
  • Malformed00%

DMARC policy (p)

Status
Published
Denominator
97
  • None1616.5%
  • Quarantine1313.4%
  • Reject6870.1%

DMARC subdomain policy (sp)

Status
Published
Denominator
97
  • None99.3%
  • Quarantine44.1%
  • Reject1818.6%
  • Inherited6668%

DMARC SPF alignment mode (aspf)

Status
Published
Denominator
97
  • Relaxed9294.9%
  • Strict55.2%

DMARC DKIM alignment mode (adkim)

Status
Published
Denominator
97
  • Relaxed9294.9%
  • Strict55.2%

Eligible analytical lenses

Mail trust by cohort

Eligible cohorts are shown separately. Cohorts can overlap, and suppressed cells stay hidden.

A domain may appear in more than one analytical cohort. Cohort membership totals therefore do not sum to the fixed panel size.

Australian government14 domainsView MX, SPF and DMARC posture

MX

14 determinate · 0 indeterminate

Status
Published
Posture denominator
14
  • VisibleSuppressedComplementary suppression
  • Null MX00%
  • Not observedSuppressedSmall-cell suppression

SPF

14 determinate · 0 indeterminate

Status
Published
Posture denominator
14
  • Not observed00%
  • Single SPF record14100%
  • Multiple records00%
  • Malformed00%

DMARC

14 determinate · 0 indeterminate

Status
Published
Posture denominator
14
  • Not observed00%
  • Valid14100%
  • Multiple records00%
  • Malformed00%
View cohort context
Australian not-for-profit16 domainsView MX, SPF and DMARC posture

MX

15 determinate · 1 indeterminate

Status
Published
Posture denominator
15
  • Visible15100%
  • Null MX00%
  • Not observed00%

SPF

15 determinate · 1 indeterminate

Status
Published
Posture denominator
15
  • Not observed00%
  • Single SPF recordSuppressedComplementary suppression
  • Multiple records00%
  • MalformedSuppressedSmall-cell suppression

DMARC

15 determinate · 1 indeterminate

Status
Published
Posture denominator
15
  • Not observed00%
  • Valid15100%
  • Multiple records00%
  • Malformed00%
View cohort context
Australian higher education10 domainsView MX, SPF and DMARC posture

MX

10 determinate · 0 indeterminate

Status
Published
Posture denominator
10
  • Visible10100%
  • Null MX00%
  • Not observed00%

SPF

10 determinate · 0 indeterminate

Status
Published
Posture denominator
10
  • Not observed00%
  • Single SPF recordSuppressedComplementary suppression
  • Multiple records00%
  • MalformedSuppressedSmall-cell suppression

DMARC

10 determinate · 0 indeterminate

Status
Published
Posture denominator
10
  • Not observed00%
  • Valid10100%
  • Multiple records00%
  • Malformed00%
View cohort context
Retail and marketplaces14 domainsView MX, SPF and DMARC posture

MX

14 determinate · 0 indeterminate

Status
Published
Posture denominator
14
  • Visible14100%
  • Null MX00%
  • Not observed00%

SPF

14 determinate · 0 indeterminate

Status
Published
Posture denominator
14
  • Not observed00%
  • Single SPF recordSuppressedComplementary suppression
  • Multiple records00%
  • MalformedSuppressedSmall-cell suppression

DMARC

14 determinate · 0 indeterminate

Status
Published
Posture denominator
14
  • Not observed00%
  • Valid14100%
  • Multiple records00%
  • Malformed00%
View cohort context
Public interest21 domains · overlapping cohort lensView MX, SPF and DMARC posture

MX

21 determinate · 0 indeterminate

Status
Published
Posture denominator
21
  • VisibleSuppressedComplementary suppression
  • Null MX00%
  • Not observedSuppressedSmall-cell suppression

SPF

21 determinate · 0 indeterminate

Status
Published
Posture denominator
21
  • Not observed00%
  • Single SPF record1885.7%
  • Multiple records00%
  • Malformed314.3%

DMARC

21 determinate · 0 indeterminate

Status
Published
Posture denominator
21
  • Not observed00%
  • Valid21100%
  • Multiple records00%
  • Malformed00%
View cohort context

Derivation, privacy and suppression

How this view is derived

Mail trust posture combines independently observed MX, SPF and DMARC evidence using the versioned Mail Posture derivation. It describes visible public configuration, not organisational effectiveness or compliance.

The browser renders the published aggregate contract. It does not derive Mail posture from raw DNS records or reconstruct suppressed values.

Aggregate contract

mail-posture-aggregate/v1 controls the public aggregate shape and suppression semantics.

Source derivation

mail-posture/v1 is the bounded per-domain derivation from classified MX, SPF and DMARC evidence.

Suppression

Suppressed cohort cells remain explicit as suppressed. A hidden count or share is never rendered as zero, and a whole masked distribution remains visibly masked.

Publication privacy metadata

  • Minimum cohort denominator: 10
  • Small-cell threshold: 3
  • Panel cell suppression: Not Applied
  • Cohort suppression: Primary And Complementary

Interpretation boundary

Published limitations

  • Counts describe the fixed observed .auDO panel, not the whole .au namespace.
  • Cohorts are curated analytical lenses and may overlap; they are not whole-sector assessments.
  • Mail Posture v1 describes visible public MX, SPF and DMARC evidence at the observation date.
  • Indeterminate evidence reflects insufficient observation evidence and must not be interpreted as absence.
  • SPF derivation is intentionally bounded and does not recursively resolve include or redirect chains.
  • DMARC policy and tag values describe the visible record and are not a rating of organisational mail-security maturity.
  • The aggregate does not establish compliance, security effectiveness, compromise, incident status, organisational intent or risk.
  • Small cohort cells may be suppressed to limit inadvertent disclosure of individual posture from aggregate data.

Read the evidence chain