Email communication security standards: an analysis of uptake in the EU : March 2022

Ensuring the interoperability and security of email communications is one of the cornerstones of a resilient and open Internet. In this context, the wide adoption of key Internet security standards, such as StartTLS, SPF, DKIM, DMARC, DANE and DNSSEC, is essential for a safe cyberspace for everyone. This report assesses the level of uptake of the above set of standards in Q1 2023 across EU Member States, comparing it to the global status. The analysis uses data from publicly available data sources and assessment tools, as well as from measurements conducted by the European Commission's Joint Research Centre. Our findings show that the averagelevel of adoption of all standards is similar to previous measurement periods (Q1 and Q2 2022), with StartTLS, SPF and DKIM having high adoption rates in the EU (ranging from about 70 to 95%), DMARC following with medium adoption (around 50%), and DANE with DNSSEC showing very low uptake, between 1 and 4% respectively.