Password-based SMTP in Exchange Online is being retired after two postponements. We set out the reported timeline, what fails and when, the five migration routes and why system mail belongs on its own sending path.
As passkeys replace passwords, sign-in mail should shrink while recovery and security alerts matter more. We review the 2026 FIDO data and work through each message type and three scenarios to 2030.
Apple accounts for 62.26% of tracked opens, and AI assistants now read mail for people. We look at why the open rate fails, what the data says and which signals to measure instead.
Fluent, targeted phishing is now cheap. We review the figures and their weaknesses, explain what authentication can and cannot stop and set out what legitimate senders should do next.
BIMI shows a verified logo beside authenticated email, but its entry ticket is enforced DMARC. We set out Gmail's requirements, VMC against CMC, the unverified vendor claims and three scenarios to 2028.
A new class of sender is arriving: software agents with their own inboxes. We review the 2026 funding and product signals, the deliverability and security risks and three scenarios to 2030.