🔒Email Infrastructure Trends: Consolidation and Plateau
Email is consolidating, but DMARC enforcement isn't budging
TL;DR
Ten years of DNS data show email infrastructure trends towards consolidation with Google Workspace and Microsoft 365 handling over a third of inbound mail. DMARC enforcement, however, has hit a plateau.
Ten years of DNS measurements reveal significant trends in the email landscape: Email infrastructure is consolidating around major providers like Google Workspace and Microsoft 365, which together manage nearly 40% of the world's inbound mail traffic. Meanwhile, DMARC enforcement rates have stagnated at just under half of all domains, indicating a plateau in security practices despite ongoing efforts to improve email security. Developers and IT teams need to be aware that while major players like Google Workspace (21.8%) and Microsoft 365 (16.8%) are centralizing mail services, the long tail of unique infrastructure remains vast and diverse, complicating management and security strategies. This consolidation impacts how developers design email systems and handle third-party integrations. Key numbers: By July 2026, only 22.4% of domains run their own mail servers (down from 44.6% in 2016). DMARC enforcement rates are at 46.9%, with a decline of 0.44 percentage points over the last month.
Key Points
In July 2026, only 22.4% of MX-publishing domains run their own mail servers (down from 44.6% in 2016).
Google Workspace and Microsoft 365 together manage 38.6% of inbound email traffic.
DMARC enforcement rates have plateaued at 46.9%, down by 0.44 percentage points over the last month.
About 81.5% of SPF includes are attributed using dictionary-based classification, indicating widespread use of standard configurations.
Tens of thousands of unique MX hostnames defy easy classification, highlighting the diversity in email infrastructure.
Why It Matters
If you're managing an email system or integrating with third-party services, the consolidation around Google Workspace and Microsoft 365 means fewer providers to worry about. However, the plateau in DMARC enforcement suggests ongoing challenges in securing email communications.
Frequently Asked Questions
Why does this matter?
If you're managing an email system or integrating with third-party services, the consolidation around Google Workspace and Microsoft 365 means fewer providers to worry about. However, the plateau in DMARC enforcement suggests ongoing challenges in securing email communications.
What happened?
Ten years of DNS data show email infrastructure trends towards consolidation with Google Workspace and Microsoft 365 handling over a third of inbound mail. DMARC enforcement, however, has hit a plateau.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,156 builders reading daily.