US Banking DKIM Survey
A survey of email authentication protocol deployment by banking institutions insured by the United States FDIC.
Methodology
Using the list of banking institutions and their primary domains downloaded from the United States Federal Deposit Insurance Corporation (FDIC) database, we polled the DNS records for each domain, checking the following:
- SPF: Check for domain TXT record containing v=spf1
- SenderID: Check for domain TXT record containing v=spf2
- DomainKeys (with SSP): Check for _domainkey TXT record
- DKIM (with SSP): Check for _policy._domainkey or _ssp._domainkey TXT record
- DKIM or DomainKeys (without SPP): The _domainkey zone exists but no TXT records exist for _domainkey, _policy.domainkey, or _ssp._domainkey
Survey Results
| Domains queried: | 943 |
|---|
Statistics for the successful queries:
| Domains with SPF policy: | 938 | 99% |
|---|---|---|
| Domains with SenderID policy: | 2 | 0% |
| Domains with DomainKeys policy: | 136 | 14% |
| Domains with DKIM policy: | 7 | 0% |
| Domains possibly using DomainKeys and/or DKIM: | 45 | 5% |
