- Email spoofing protection (DMARC)Can anyone send email that claims to come from this domain?18.8%
- Authorised senders (SPF)Does the domain list the servers allowed to send its mail?69.7%
- Encrypted inbound mail (MTA-STS)Must other servers encrypt the mail they deliver to this domain?0.5%
- Mail encryption reports (TLS-RPT)Will the domain hear about failed encrypted deliveries?1.5%
DNS
Websites
- Valid HTTPSDoes the website open over HTTPS with a valid certificate?92.2%
- Plain HTTP sends visitors to HTTPSDoes typing the plain address end up on HTTPS?80.8%
- HTTPS enforced by the browser (HSTS)Will browsers refuse to load the site without HTTPS?18.9%
- Current TLS (1.3)Does the site speak TLS 1.3?86.7%
- Old TLS switched off (1.0 and 1.1)Does the site still accept TLS 1.0 or 1.1?67.6%
- Post quantum key exchangeIs traffic sent today protected against decryption by a future quantum computer?52.0%





