[ Regional requirements ]

Choose a domain population without confusing a sample with a national market

Name the selected frame and its gaps before attaching a country or market label to DNS counts.

By the EmailAuth research team · 2 min read

[ Key points ]

  • Name the selected frame and its gaps before attaching a country or market label to DNS counts.
  • State whether the denominator counts entities or unique domains and preserve unresolved mappings.
On this page

A domain sample becomes misleading when its label describes a larger population than its selection process covers. A list of familiar companies may be useful for checking a collector, but it cannot describe all organisations in a country. Country-code suffixes, headquarters, regulator registration and service markets are different ways of assigning geography. Choose one and explain it.

Separate entities from domains

Create a row for each entity and a separate relation for each included domain. If two brands share a domain, avoid counting the same DNS record twice in a domain-level rate. If one company has five domains, do not let it silently contribute five times as much as a one-domain company to an entity-level statistic. Publish both units when useful, with a rule for how multiple domains map into an entity classification.

Document coverage and exclusions

A regulator’s licensed-entity list can provide a defensible entity frame, while still lacking all email domains used by those entities. A domain registry can provide a domain frame without proving that every registration is active, belongs to a separate organisation or sends email. Retain the source date and original list so acquisitions, renamed institutions and domain changes can be reconciled rather than silently replaced.

Declare whether dormant domains, subsidiaries, internationalised names and third-party sending subdomains are in scope. When a mapping is uncertain, retain an unresolved row and its reason. Do not remove hard-to-map institutions after seeing their DNS results. A useful exclusion log states the original entity, candidate domain, decision, evidence and decision time.

Choose a defensible headline

A safe pilot headline describes the named domains observed during the recorded UTC window. A national headline requires a national frame or a justified probability sample and appropriate statistical analysis. A larger convenience sample is still a convenience sample. Adding thousands of domains does not repair an unknown selection mechanism.

Apply a transparent hypothetical decision

Suppose Organisation A maps to three distinct domains and Organisation B maps to one, with a fifth domain claimed by both but unresolved. A unique-domain analysis has five candidate domains, not five independent organisations. An entity analysis has two entities and needs a declared aggregation rule for partial or conflicting domain evidence. Keep the shared-domain dispute visible and do not resolve ownership by choosing whichever result improves the headline. This is a hypothetical mapping exercise, not observed market data.

Technical boundary and publication decision

RFC 9989 Sections 4.7, 4.10.1 and 5.3 distinguish record syntax, policy discovery and message evaluation. An exact-owner TXT observation is not full policy discovery. RFC 9990 Section 3.1 describes aggregate message evidence, which is separate from a domain crawl. RFC 2308 Section 2 distinguishes negative DNS responses; a client timeout is not proof of absence. Study-design choices here are editorial methodology, not statistical requirements prescribed by those RFCs. This teaching revision makes no historical pilot or national adoption finding; any later empirical result needs its own accessible, hash-bound data and independent method review.

[ Takeaway ]

State whether the denominator counts entities or unique domains and preserve unresolved mappings.

[ By role ]

What this means for you

Choose your role for practical next steps.

IT / Mail Admin

Preserve entity boundaries

Domain counts and institution counts answer different questions.

Next steps

  1. Deduplicate domains separately from entities.
  2. Record mapping uncertainty.
  3. Keep unresolved entity mappings in the denominator log.

CISO / SecOps

Review selection bias

An apparently strong rate can hide systematic exclusions.

Next steps

  1. Inspect excluded and unresolved rows.
  2. Require provenance for every entity claim.
  3. Review how large multi-domain entities affect weighting.

Founder / Non-technical

Use a truthful market label

The sampled audience and claimed market must match.

Next steps

  1. Approve the headline denominator.
  2. Avoid national rankings from convenience samples.
  3. Distinguish target market from sampled frame.

[ FAQs ]

Frequently asked questions

Does a .ae suffix identify every UAE organisation?

No. Organisations may use other suffixes, and a suffix alone is not a complete entity or sender-estate definition.

Can a larger convenience sample become representative?

Size alone does not correct selection bias or missing parts of the target population.

What if one entity has several brands?

Retain the entity-to-brand-to-domain relation and state which unit receives weight in the reported statistic.

Should shared domains be counted repeatedly?

Not in a unique-domain denominator. Entity-level analysis needs an explicit rule for shared infrastructure.

Can I remove domains with timeouts?

Retain them as unresolved attempted observations; disclose any separate complete-case calculation.

Is a regulator list enough for sender coverage?

It may establish entities, but their website and sending-domain mappings need separate evidence.

What does the hypothetical mapping represent?

Only a teaching example of entity and domain denominators, not a measured population.

Which source date matters?

Retain both the population source date or retrieval date and the DNS observation timestamps.

[ Sources ]

Sources

  1. RFC 9989

    Sections §4.4 · §4.7 · §4.10.1 · §5.3.5 · §5.4

  2. RFC 9990

    Sections §3.1 · §7

  3. RFC 2308

    Sections §2 Negative Responses · §5 Caching Negative Answers

[ Glossary ]

Glossary

Sampling frame
The declared list from which observations are selected; it is not necessarily the target population.
Exact-owner observation
A response to the specified DNS name and type, without inferring a broader sender estate.
Unknown observation
An attempted measurement that did not produce sufficient interpretable evidence.
Observation window
The recorded UTC start and end of the collection operation.

Enterprise provenance

Why top financial institutions and governments retired their email security dashboards.

Traditional email authentication platforms sell you a dashboard and ask your engineers to do the labour. In high-stakes environments, manual oversight means delayed enforcement, configuration drift and unmonitored shadow domains.

EmailAuth is the agentic email provenance platform. Our agents enforce p=reject, keep third-party senders aligned and move your domains to full RFC 9989 compliance, the new DMARC standard,, with human-in-the-loop auditability.

Governments Large enterprises Tier-1 financial institutions

SaaS · Dedicated tenancy · Air-gapped on-prem · BYOK encryption

Knowledge Base