<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Canny Pigeons Research</title><link>https://cannypigeons.com/research</link><description>We track the state of email authentication across the internet and openly share data, insights and guidance that help companies and domain owners defend against impersonation.</description><language>en-us</language><atom:link href="https://cannypigeons.com/research.xml" rel="self" type="application/rss+xml"/><item><title>26 of the world's 100 largest companies still let anyone send email as them</title><link>https://cannypigeons.com/research/forbes-global-2000-2026</link><guid isPermaLink="true">https://cannypigeons.com/research/forbes-global-2000-2026</guid><pubDate>Tue, 08 Sep 2026 00:00:00 +0000</pubDate><description>We scanned the DMARC, SPF, MTA-STS, TLS-RPT and BIMI records of the Forbes Global 2000 top 100. 64 are at reject, 15 have no DMARC record at all, and geography predicts enforcement better than size.</description></item></channel></rss>