Email Consolidates Around Google and Microsoft as Self-Hosting Declines

Self hosted email continues to steeply decline

Email Consolidates Around Google and Microsoft as Self-Hosting Declines

Ten years of DNS measurements from the OpenINTEL project reveal that self-hosted email in the Tranco top-1M has dropped from 44.6% in 2016 to 22.4% in 2026, with Google Workspace and Microsoft 365 now handling 38.6% of inbound mail. DMARC adoption has plateaued: only 46.9% of domains enforce policies, and the most common record is a copy-pasted 'p=none'. A long tail of 36,455 unmatched MX hostnames highlights the invisible infrastructure behind the major providers.

When more than a third of popular domains depend on two providers to receive mail, an outage, a filtering change or a policy decision at either one propagates through the whole ecosystem at once.
  1. Leonard_of_Q

    Does it or is this part of the push to keep people from hosting their own email services? I've self-hosted email for about 35 years now and see no reason to stop, it hardly ever needs maintenance and my mail tends to arrive even at hostile destinations (Micros..., Ggl, ...). Don't listen to those who fight against decentralisation, their agenda does not match yours.

  2. throwaway67743

    I'm sure it's a good article but there is no need for it to be written by an LLM... Is everyone really this lazy now? I don't think I've read anything written by a human for at least a full month.

  3. A_D_E_P_T

    I wish there were a way to self-host without my emails constantly getting stuck in other people's spam folders. And it made me really paranoid about email, too -- like I'd send emails, and I'd never know if the other end received them or not, unless they replied. Without a reply, I would always wonder whether the message got a look, or disappeared without a trace.

    The only way around this seems to be hosting with Google, Microsoft, or maybe Proton. Any other ideas?

  4. sharperguy

    If someone can solve the spam problem in email without just manually whitelisting specific providers that heavily monitor their users, then they can completely reverse the direction of this problem. Unfortunately it doesn't seem likely someone could do that.

  5. gommm

    I've been running my own email server with exim and dovecot for 20ish years, I like the freedom it gives me but I have to say it's a significant investment. Not so much keeping things up to date but instead making sure that my emails are actually delivered. I've eventually switched to using fastmail just for sending emails and even with that, I don't get perfect delivery.

  6. avian

    > DMARC: adopted everywhere, enforced nowhere in particular

    Unfortunately this only talks about what DMARC policies are published by domains. I was hoping they will go into some analysis of how many mailboxes actually hard-enforce DMARC rules on ingress (as in, respect the DMARC policy as published by the sender's domain, p=reject or whatever else it might be)

    I have been hesitant to enforce DMARC rules on my server. Partly because maintaining it was a pain (see opendmarc - maybe better with rspamd now), but also because on my test runs I saw plenty of legitimate incoming mail that simply would get rejected if I were to enforce DMARC on ingress.

    I suspect big players like gmail have some kind of soft enforcement/reputation/machine learning approach to DMARC, but this is way too much work for a small time admin like me.

  7. skeledrew

    I've been using GMail roughly since it existed I think, and have thought on and off over the years about self-hosting. The notion scares me every time because with it comes thoughts of what would happen if I were to lose the domain name or server, or even if there was an outage at the "wrong time". And then there's also the idea of updating the 1 million+1 services, etc that I used it to sign up for. As much as I'm not a fan of a decent amount of what they've been doing, they're however a stable entity which offers a very reliable service for essentially free. Very likely that many others also think along those lines.

    The only thing I think can compete with that is some kind of decentralized solution, also something I've thought about a bit. Like a Keyoxide-based[0] - or similar - setup that makes it virtually impossible for one to lose their online identity (since lost keys can be rotated out once one has - access to - enough proofs), and then that identity can be used - without fear - to route associated data, etc. Of course adoption of what could become an adjacent or new standard would be the next hurdle to overcome...

    [0] https://keyoxide.org/

  8. DogRunner

    And on the other side, projects like stalwart email ( http://stalw.art/ ) and mox ( http://xmox.nl/ ) makes it so much easier to build an e-mailsystem on your server.

More from this day

2026-08-17