Internet standards : email communication security standards : an analysis of uptake in the EU : 2025

Ensuring the interoperability and security of email communications is one of the cornerstones of a resilient and open Internet. In this context, the wide adoption of key Internet security standards, such as StartTLS, SPF, DKIM, DMARC, DANE and DNSSEC, is essential for a safe cyberspace for everyone. This report assesses the level of acceptance of the above set of standards for Q3 2025 in EU member states, comparing it to the global status. The analysis uses data from publicly available data sources and assessment tools, as well as measurements carried out by the Joint Research Center of the European Commission. Our findings show that the average level of adoption of most standards is similar to the last measurement period (Q1 2025), except for DMARC, which shows an important increase in adoption. More specifically, StartTLS, SPF, DKIM, and DMARC have high adoption rates in the EU (ranging from around 87% to 98%, according to mecsa-st results), while DANE with DNSSEC shows very low uptake, that is, 3% and 5%, respectively.