It’s a long way to run, granted. Italian Public Administrations are adopting some anti spam measures as SPF (Sender Policy Framework) and DMARC (Domain-based Message Authentication, Reporting & Conformance) TXT records in their authoritative name servers’ zone file. For IPv6 deployment numbers, please refer to my previous article “IPv6 in the Internet resources of italian Public Administration at a glance“.
Our study finds that out of 8.432 domain names, 996 have a SPF record in place (11.81%). Just two (yes 2!) of them have a DMARC record as well (0.02%). Four ADSP (Author Domain Signing Practices) records found (0.05%).
At the moment we cannot exactly determine if those domain names published a DKIM (DomainKeys Identified Mail) policy in their name servers, but we could assume that ADSP records are in place if DKIM is configured, hopefully, so 4 DKIM records (0.05%).
I would encourage all ICT teams involved in Public Administrations to look into domain names reputation. In current e-mail world, we are moving from IP reputation (IPv4) to domain reputation (IPv4 and IPv6). As an example, look at what Google requires to deal with gmail users: https://support.google.com/mail/answer/81126
Check also my previous article on “How to run Postfix with OpenDKIM on FreeBSD 9.0“.
[Raw hostnames from: http://siamogeek.com/analisi-siti-pa/download-dati-analisi-siti-pa/]
Anti spam measures adopted by italian Public Administrations: mostly SPF by Antonio Prado is licensed under a Creative Commons Attribution-ShareAlike 4.0 International