Why “94% pass” is a dangerous metric

Most DMARC tools show one number: your pass rate. But that number is misleading — it can describe a safe domain and a dangerous one alike.

Same number, opposite advice

A domain at 94% has 6% failing mail. Is that spoofing you want to block, or a legitimate newsletter without DKIM that p=reject would break? The percentage doesn’t tell you.

Reason per source

The only correct approach is to classify each source separately — approved, pending or blocked. You’re ready to tighten only when every approved source aligns reliably — never on a total.