KI-Barometer · Research data
Aggregate observations of Swiss email security settings
What is public?
Downloads contain aggregate metrics only, with no domain names, email addresses, raw DNS values or individual domain results. Domain-level measurement data remain private.
The release manifest, attestation and checksums connect 68 published metrics to the final measurement. They verify artifact identity; they do not independently prove every underlying observation.
Machine-readable metrics and verification evidence.
Public code supports inspection of the method. Exact recomputation requires access to the private measurement inputs; a new scan may produce different results.
Downloads
Download complete release archive · Permanent Zenodo version (DOI) · GitHub Release
Scroll the table sideways to see all columns.
| File | Format | Bytes | SHA-256 |
|---|---|---|---|
| aggregate-attestation.json | JSON | 1'465 | 40b585351ee4e4097bc08f12288fedc049ff5d2eabcff021a654cc1fb7653051 |
| metrics.csv | CSV | 25'810 | 9d291c2465f01be7ff0d767e861c0e4d4dd6de9d1d4e2593d80ad490f7eb0908 |
| metrics.json | JSON | 46'968 | 3f4a3fd139287a067396f3175a50b5236adba46e764849227c22718c64c3565d |
| release.json | JSON | 13'798 | 82a6027ab8cecdc70163a70b4cf49428ed568fcda5760e2bf770b026b675048c |
Aggregate data and figure licence: CC BY 4.0. Scanner code: MIT.
Provenance and reproducibility
Scroll the table sideways to see all columns.
| Source population | SWITCH .ch · 2026-04-12 · 2'459'127 domains in the source list |
|---|---|
| Source hash | be742a42b89dbac80b5296316d35a2d245383e31d15d5df0b1242af8ec9e07c8 |
| Measurement interval | 2026-08-21T21:05:22.017897Z – 2026-08-23T18:02:41.508091Z |
| Final database hash | a503dab7c0079c8b14f22b274592be1a7b3fc39deec9d9c0acd4e66c7729a575 |
| Final run manifest | 3f33f98a6d2924ed3b34e64af9dcb433083d722f6977df625f4d7ad930f70cd6 |
| Metrics | 68 deterministically computed aggregate metrics |
| Status | Published |
Documentation
View and download charts
Charts are editorial derivatives of the unchanged v2026.08.2 aggregate metrics. Original release figures remain available in the archive.
How do Swiss email domains protect themselves?
The 70.01% combines no supported policy detected and p=none. These are observed policy tags, not full validity checks. Reporting and actual recipient handling were not verified.
SPF and detectable DKIM
An SPF record alone is not complete protection. This study does not fully resolve every include or redirect or perform complete recursive SPF evaluation under RFC 7208. DKIM detection probes known provider-associated selectors. Unlisted selectors can be missed, so the detected share is a lower bound. The short-key and testing-flag percentages use only domains with a detected selector as their denominator.
Other DNS and transport signals
Record presence only; no cryptographic DNSSEC validation or functional DANE test.
Swiss email infrastructure
Hostname pattern only; does not establish actual operator, market share or security.
Swiss Email Security Report 2026
The study measured published settings. It did not test attacks or actual message handling.
