{
 "metric": "dmarc-reporting",
 "segment": "za",
 "anchor": "domain",
 "label": "South Africa (domains)",
 "population": "domains in South Africa",
 "states": [
  "receiving",
  "none_configured",
  "unauthorised"
 ],
 "quiet_failure_states": [
  "none_configured",
  "unauthorised"
 ],
 "measurement": "Tier 0. Read the `rua=` tag from the `_dmarc` TXT record already fetched for `dmarc-policy`. Where a destination mailbox sits on another domain, RFC 9990 requires that domain to publish `<policy-domain>._report._dmarc.<destination>` (or a `*` wildcard at the same name) before a conforming receiver will send anything. Denominator: domains that **have** a DMARC record — a domain with no policy has nothing to report on and is excluded rather than counted as receiving nothing.",
 "why_it_matters": "The reporting half of the p=none story, and the same shape: the record is valid, the checker is green, a reporting address is configured, and not one report has ever arrived. Without the feedback loop nobody ever learns which mail is failing, so the rollout from `none` to `reject` — the thing the policy exists to reach — never starts. `unauthorised` is the quieter of the two: the owner did everything visible correctly and the consent record is on a domain they may not control.",
 "limits": "Aggregate (`rua`) only; `ruf` uses the same consent mechanism but is rarely honoured and is not counted. Reporting is orthogonal to policy strength — a domain can enforce `reject` and still be blind, or sit at `p=none` and receive reports perfectly — so this is not a second reading of `dmarc-policy`. A destination that authorises the domain but silently drops the mail is indistinguishable from one that delivers it; consent is observable from outside, delivery is not.",
 "data_tier": "dns",
 "population_predicate": "has_mx",
 "entity_type": "domain",
 "kind": "failure",
 "latest": {
  "day": "2026-10-01",
  "n": 110,
  "qf_pct": 60.91,
  "ci": [
   51.57,
   69.51
  ],
  "dist": {
   "receiving": 39.09,
   "none_configured": 54.55,
   "unauthorised": 6.36
  },
  "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
 },
 "series": [
  {
   "day": "2026-09-21",
   "n": 112,
   "qf_pct": 60.71,
   "ci": [
    51.46,
    69.26
   ],
   "dist": {
    "receiving": 39.29,
    "none_configured": 53.57,
    "unauthorised": 7.14
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  },
  {
   "day": "2026-09-28",
   "n": 111,
   "qf_pct": 61.26,
   "ci": [
    51.97,
    69.8
   ],
   "dist": {
    "receiving": 38.74,
    "none_configured": 54.05,
    "unauthorised": 7.21
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  },
  {
   "day": "2026-10-01",
   "n": 110,
   "qf_pct": 60.91,
   "ci": [
    51.57,
    69.51
   ],
   "dist": {
    "receiving": 39.09,
    "none_configured": 54.55,
    "unauthorised": 6.36
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  }
 ],
 "license": "CC BY 4.0",
 "source": "https://quietfailures.com/datasets/dmarc-reporting/za"
}