Universities
Email security of 18 universities
Sprawling, decentralised IT and a domain every student trusts — universities are a spoofing target with an unusually hard email-auth problem.
Across these 18 domains, 100% publish SPF, 100% publish DMARC and 66.7% enforce it (reject or quarantine), 33.3% sit on p=none, and 77.8% sign with DKIM. Scanned June 24, 2026.
Every domain in this cohort
| Domain | SPF | DMARC | DKIM | MTA-STS | TLS-RPT |
|---|---|---|---|---|---|
| berkeley.edu | Softfail | Reject | Yes | No | No |
| cam.ac.uk | Hardfail | Reject | Yes | No | Yes |
| epfl.ch | Present | Quarantine | Yes | No | No |
| harvard.edu | Softfail | Quarantine | Yes | No | No |
| iisc.ac.in | Hardfail | Quarantine | Yes | No | No |
| iitb.ac.in | Hardfail | Reject | No | No | No |
| ox.ac.uk | Present | Quarantine | Yes | No | Yes |
| princeton.edu | Softfail | Reject | Yes | No | No |
| stanford.edu | Neutral | Quarantine | Yes | No | No |
| tsinghua.edu.cn | Present | Quarantine | No | No | No |
| u-tokyo.ac.jp | Hardfail | Reject | No | No | No |
| yale.edu | Softfail | Quarantine | Yes | No | No |
| caltech.edu | Neutral | None (monitor) | Yes | No | No |
| cmu.edu | Softfail | None (monitor) | No | No | No |
| ethz.ch | Hardfail | None (monitor) | Yes | No | No |
| imperial.ac.uk | Softfail | None (monitor) | Yes | No | No |
| mit.edu | Hardfail | None (monitor) | Yes | No | No |
| nus.edu.sg | Hardfail | None (monitor) | Yes | No | No |
Where does your domain stand?
Run the same 15 checks on your own domain — free, no signup. If you need the result as evidence, the signed Domain Audit Report turns it into a dated artifact your auditor can verify.