| Entity Type | With MX | Using Gateway | Rate |
|---|---|---|---|
| County | 2,108 | 545 | 25.9% |
| Higher Education | 2,767 | 564 | 20.4% |
| State Agency | 122 | 24 | 19.7% |
| Municipality | 8,338 | 1,546 | 18.5% |
| Township | 1,646 | 303 | 18.4% |
| Special District | 2,627 | 345 | 13.1% |
| K-12 | 12,607 | 1,033 | 8.2% |
| Metric | TX K-12 | TX Higher Ed | National K-12 |
|---|---|---|---|
| Entities | 1,245 | 189 | 18,476 |
| Domain Coverage | 99.7% | 96.3% | 86.3% |
| SPF Adoption | 87.8% | 96.6% | ~77% |
| DMARC Adoption | 67.2% | 91.8% | ~47% |
| SPF-DMARC Gap | 20.6pp | 4.8pp | ~30pp |
Why this matters for education research:
K-12 districts are prime targets for phishing, ransomware, and business email compromise. DMARC enforcement prevents domain spoofing — yet fewer than half of K-12 districts nationwide have it configured. The data reveals massive state-by-state variation (10.8% to 67.3%), suggesting policy and funding interventions can move the needle.
| State | Domains | SPF | DMARC |
|---|---|---|---|
| TX Texas | 1,229 | 87.8% | 67.2% |
| NY New York | 924 | 86.1% | 67.3% |
| WI Wisconsin | 461 | 88.7% | 66.4% |
| OR Oregon | 209 | 91.9% | 67.5% |
| WA Washington | 250 | 86.8% | 62.0% |
| IA Iowa | 327 | 84.7% | 61.8% |
| DC District of Columbia | 69 | 82.6% | 62.3% |
| NJ New Jersey | 661 | 86.5% | 61.4% |
| AK Alaska | 54 | 83.3% | 61.1% |
| CT Connecticut | 195 | 86.2% | 61.0% |
| State | Domains | SPF | DMARC |
|---|---|---|---|
| WV West Virginia | 52 | 42.3% | 7.7% |
| SD South Dakota | 157 | 27.4% | 10.8% |
| ND North Dakota | 201 | 58.7% | 19.4% |
| TN Tennessee | 144 | 72.9% | 27.8% |
| DE Delaware | 41 | 51.2% | 31.7% |
| LA Louisiana | 16 | 62.5% | 31.2% |
| OK Oklahoma | 535 | 75.7% | 32.9% |
| GA Georgia | 172 | 70.3% | 33.7% |
| FL Florida | 12 | 50.0% | 33.3% |
| MS Mississippi | 44 | 77.3% | 34.1% |