What share of domains in Croatia have dmarc-reporting?

How this is measured

Tier 0. Read the rua= tag from the _dmarc TXT record already fetched for dmarc-policy. Where a destination mailbox sits on another domain, RFC 9990 requires that domain to publish <policy-domain>._report._dmarc.<destination> (or a * wildcard at the same name) before a conforming receiver will send anything. Denominator: domains that have a DMARC record — a domain with no policy has nothing to report on and is excluded rather than counted as receiving nothing.

Passive measurement: a single DNS lookup, TLS handshake, or homepage GET per domain. Aggregate-only; no individual company is named. 95% Wilson confidence intervals. Population: domains sampled from the Common Crawl web graph, filtered to those that do email. Parked domains excluded. Snapshot: common-crawl-domain-stratified-c400-g2500-seed20260729.

Licensed CC BY 4.0 — reuse with attribution to Quiet Failures. Download: JSON · CSV.

Check a specific domain against this control with the free Email authentication audit.

Why it matters

The reporting half of the p=none story, and the same shape: the record is valid, the checker is green, a reporting address is configured, and not one report has ever arrived. Without the feedback loop nobody ever learns which mail is failing, so the rollout from none to reject — the thing the policy exists to reach — never starts. unauthorised is the quieter of the two: the owner did everything visible correctly and the consent record is on a domain they may not control.