Internet standards : email communication security standards - an analysis of uptake in the EU : March 2024

Ensuring the interoperability and security of email communications is one of the cornerstones of a resilient and open Internet. In this context, the wide adoption of key Internet security standards, such as StartTLS, SPF, DKIM, DMARC, DANE and DNSSEC, is essential for a safe cyberspace for everyone. This report assesses the level of uptake of the above set of standards in Q1 2024 across EU Member States, comparing it to the global status. The analysis uses data from publicly available data sources and assessment tools, as well as from measurements conducted by the European Commission's Joint Research Centre. Our findings show that the average level of adoption of all standards is similar to the previous measurement period (Q3 2023), with StartTLS, SPF and DKIM having high adoption rates in the EU (ranging from around 89% to 99%), DMARC following with medium adoption (around 71%), and DANE with DNSSEC showing very low uptake, i.e., 2% and 5%, respectively.