Research
Can They Email As Me? periodically publishes aggregate, de-identified research on email authentication adoption across Australian organisations — never a directory of individual domains and their weaknesses.
Snapshot as of 2026-08-08 20:44 UTC (3 hours ago) · refreshed every few hours, not live · counts each distinct domain once, using its most recent completed check.
Domains checked
8
Distinct domains with at least one completed check.
Publish an SPF record
75%
6 of 8 domains.
Publish a DMARC record
75%
6 of 8 domains.
DMARC set to enforce
63%
Policy is quarantine or reject, not just monitoring (p=none).
Detectable DKIM signing
0%
Best-effort only — DKIM selectors aren't discoverable without sending mail, so this understates real adoption.
SPF + enforcing DMARC together
63%
The combination that meaningfully blocks email spoofing of the domain.
These figures come from domains people have voluntarily checked with this tool — not a random or representative sample of Australian organisations — so they describe this tool's userbase, not the whole economy.
A future in-depth study — with methodology, limitations and versioned data files — will also be linked from this page once published.