Internet standards : email communication security standards : an analysis of uptake in the EU : September 2024

Ensuring the interoperability and security of email communications is one of the cornerstones of a resilient and open Internet. In this context, the wide adoption of key Internet security standards, such as StartTLS, SPF, DKIM, DMARC, DANE and DNSSEC, is essential for a safe cyberspace for everyone. This report assesses the level of uptake of the above set of standards in Q3 2024 across EU Member States, comparing it to the global status. The analysis uses data from publicly available data sources and assessment tools, as well as from measurements conducted by the European Commission's Joint Research Centre. Our findings show that the average level of adoption of most standards is similar to the last measurement period (Q1 2024), except for DMARC, which shows an important increase in adoption. More specifically, StartTLS, SPF, DKIM, and DMARC have a high adoption rates in the EU (ranging from around 84% to 98%, according to the results of mecsa-st), while DANE with DNSSEC showing very low uptake, i.e., 2% and 5%, respectively.