What are potential future changes in email deliverability?
Still have a question, spotted an error, or have a better explanation or a source we should cite?
Email deliverability has never been static. Every time senders got comfortable, Gmail or Yahoo Mail raised the bar. The 2024 bulk sender requirements were a big shift, but they weren't the finish line. Here's where things are heading.
Authentication is getting stricter. Right now, most bulk senders need SPF, DKIM, and DMARC at p=none. That's the floor, not the ceiling. The expectation across the industry is that p=reject becomes the default expectation for established senders, not just a gold-star goal. If you're still sitting at p=none, now is the time to move.
BIMI is going mainstream. BIMI lets your brand logo show up in the inbox next to your sender name. Adoption has been slow because it requires p=reject and (for Gmail) a Verified Mark Certificate. But as more senders get there, the visual trust signal it creates will matter more. Inboxes are going to reward senders who can prove who they are.
Engagement signals are getting smarter. Mailbox providers already weight opens, clicks, moves-to-inbox, and replies when deciding where your email lands. AI is making those models more granular. It's not just whether your list opens. It's whether this person opens your type of email. Senders who segment by real engagement will have a meaningful edge over those blasting the same content to everyone.
Privacy rules aren't going away. Regulations like GDPR and CAN-SPAM already shape what you can send and to whom. More regional laws are coming, and consent requirements are tightening. Apple's Mail Privacy Protection already made open rates unreliable as a sole metric. Expect more tracking limitations, not fewer.
So what do you actually do with all this? The senders who will handle future changes well are already doing the basics right: clean authentication, engaged lists, easy unsubscribes, and content people actually want. None of that changes. (Of course, that's easier said than done.)
If you're not sure where your authentication stands today, you can check with our free SPF checker or DMARC generator. Or if things feel unclear, ask us directly. No pitch, just answers.
Contributors
Who worked on this answer
Every name links to their profile. Every company links to their site. Real people, real accountability.
