Research
Published findings
Field Scan
The authentication gap in California escrow
We scanned the public DNS of 250+ licensed escrow and title businesses. Roughly half cannot reject forged email.
August 2026Read
Analysis
Why domains stall at p=none
Most firms that start DMARC never finish it. The record exists. The protection does not.
August 2026Read
Technical Brief
The ten-lookup problem
SPF has a hard limit almost nobody watches. Past it, the record fails without a single visible error.
August 2026Read
Belmor Branch