DMARC and SPF across three populations of Romanian domains, 2026-Q4

Measurement study of DMARC and SPF publication across three mutually exclusive populations of Romanian (.ro) domains, from a DNS snapshot taken on 23 September 2026.

The populations are reported separately and never combined:

• A: registrable .ro domains from the Chrome UX Report (table chrome-ux-report.all.202608), 64,207 domains
• B: the .ro subset of Tranco list N2PYW, 17,608 domains, with breakdowns by rank band
• C: websites of organisations listed by named Romanian business and industry directories, 419 domains

Records are classified to the specifications (RFC 9989 for DMARC, RFC 7208 for SPF), not to the behaviour of checker tools. DNS resolution failures are reported separately from absent records. The Organizational Domain is found with the RFC 9989 DNS tree walk, with divergence from the Public Suffix List recorded. The design was frozen before the first counted query. Changes made after the freeze are dated in the README and the method note.

This record contains:

• the report (PDF)
• talnir-check, the measurement tool, with its known-answer test suite, the pinned Public Suffix List (SHA-256 recorded) and the Unbound resolver configuration used for the runs
• the aggregation code and the public-administration exclusion rule
• every published figure (aggregates_v1.csv) and a census of _dmarc at all 15 .ro public suffixes
• the open questions log

No per-domain data is published, and no measured domain or organisation is named. Every cell under 10 domains is suppressed. Domain-level data is available separately under licence from talnir.eu.

Code: MIT. Data and open questions log: CC BY 4.0. The bundled Public Suffix List is under MPL 2.0.