{
 "metric": "dmarc-reporting",
 "segment": "sa",
 "anchor": "domain",
 "label": "Saudi Arabia (domains)",
 "population": "domains in Saudi Arabia",
 "states": [
  "receiving",
  "none_configured",
  "unauthorised"
 ],
 "quiet_failure_states": [
  "none_configured",
  "unauthorised"
 ],
 "measurement": "Tier 0. Read the `rua=` tag from the `_dmarc` TXT record already fetched for `dmarc-policy`. Where a destination mailbox sits on another domain, RFC 9990 requires that domain to publish `<policy-domain>._report._dmarc.<destination>` (or a `*` wildcard at the same name) before a conforming receiver will send anything. Denominator: domains that **have** a DMARC record — a domain with no policy has nothing to report on and is excluded rather than counted as receiving nothing.",
 "why_it_matters": "The reporting half of the p=none story, and the same shape: the record is valid, the checker is green, a reporting address is configured, and not one report has ever arrived. Without the feedback loop nobody ever learns which mail is failing, so the rollout from `none` to `reject` — the thing the policy exists to reach — never starts. `unauthorised` is the quieter of the two: the owner did everything visible correctly and the consent record is on a domain they may not control.",
 "limits": "Aggregate (`rua`) only; `ruf` uses the same consent mechanism but is rarely honoured and is not counted. Reporting is orthogonal to policy strength — a domain can enforce `reject` and still be blind, or sit at `p=none` and receive reports perfectly — so this is not a second reading of `dmarc-policy`. A destination that authorises the domain but silently drops the mail is indistinguishable from one that delivers it; consent is observable from outside, delivery is not.",
 "data_tier": "dns",
 "population_predicate": "has_mx",
 "entity_type": "domain",
 "kind": "failure",
 "latest": {
  "day": "2026-10-01",
  "n": 142,
  "qf_pct": 62.68,
  "ci": [
   54.49,
   70.2
  ],
  "dist": {
   "receiving": 37.32,
   "none_configured": 52.11,
   "unauthorised": 10.56
  },
  "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
 },
 "series": [
  {
   "day": "2026-09-21",
   "n": 139,
   "qf_pct": 63.31,
   "ci": [
    55.04,
    70.86
   ],
   "dist": {
    "receiving": 36.69,
    "none_configured": 51.8,
    "unauthorised": 11.51
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  },
  {
   "day": "2026-09-28",
   "n": 139,
   "qf_pct": 62.59,
   "ci": [
    54.31,
    70.19
   ],
   "dist": {
    "receiving": 37.41,
    "none_configured": 51.8,
    "unauthorised": 10.79
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  },
  {
   "day": "2026-10-01",
   "n": 142,
   "qf_pct": 62.68,
   "ci": [
    54.49,
    70.2
   ],
   "dist": {
    "receiving": 37.32,
    "none_configured": 52.11,
    "unauthorised": 10.56
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  }
 ],
 "license": "CC BY 4.0",
 "source": "https://quietfailures.com/datasets/dmarc-reporting/sa"
}